./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4eb5ae4a2b95fd78cf87e688565203c0839d6de752e442a1cce7638954224909 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-21 09:12:06,586 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-21 09:12:06,588 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-21 09:12:06,611 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-21 09:12:06,611 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-21 09:12:06,612 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-21 09:12:06,614 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-21 09:12:06,619 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-21 09:12:06,620 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-21 09:12:06,622 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-21 09:12:06,623 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-21 09:12:06,625 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-21 09:12:06,625 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-21 09:12:06,626 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-21 09:12:06,627 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-21 09:12:06,628 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-21 09:12:06,629 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-21 09:12:06,630 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-21 09:12:06,632 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-21 09:12:06,638 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-21 09:12:06,639 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-21 09:12:06,641 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-21 09:12:06,642 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-21 09:12:06,643 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-21 09:12:06,647 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-21 09:12:06,647 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-21 09:12:06,647 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-21 09:12:06,648 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-21 09:12:06,649 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-21 09:12:06,650 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-21 09:12:06,650 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-21 09:12:06,651 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-21 09:12:06,652 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-21 09:12:06,653 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-21 09:12:06,654 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-21 09:12:06,655 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-21 09:12:06,656 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-21 09:12:06,656 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-21 09:12:06,656 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-21 09:12:06,657 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-21 09:12:06,658 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-21 09:12:06,659 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-21 09:12:06,684 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-21 09:12:06,684 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-21 09:12:06,685 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-21 09:12:06,685 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-21 09:12:06,686 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-21 09:12:06,687 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-21 09:12:06,687 INFO L138 SettingsManager]: * Use SBE=true [2022-11-21 09:12:06,687 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-21 09:12:06,688 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-21 09:12:06,688 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-21 09:12:06,688 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-21 09:12:06,688 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-21 09:12:06,689 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-21 09:12:06,689 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-21 09:12:06,689 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-21 09:12:06,690 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-21 09:12:06,690 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-21 09:12:06,690 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-21 09:12:06,691 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-21 09:12:06,691 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-21 09:12:06,691 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-21 09:12:06,691 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-21 09:12:06,692 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-21 09:12:06,692 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-21 09:12:06,692 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-21 09:12:06,693 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-21 09:12:06,693 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-21 09:12:06,693 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-21 09:12:06,693 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-21 09:12:06,694 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-21 09:12:06,694 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-21 09:12:06,695 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-21 09:12:06,695 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4eb5ae4a2b95fd78cf87e688565203c0839d6de752e442a1cce7638954224909 [2022-11-21 09:12:06,937 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-21 09:12:06,959 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-21 09:12:06,962 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-21 09:12:06,963 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-21 09:12:06,964 INFO L275 PluginConnector]: CDTParser initialized [2022-11-21 09:12:06,965 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/../../sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c [2022-11-21 09:12:10,072 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-21 09:12:10,405 INFO L351 CDTParser]: Found 1 translation units. [2022-11-21 09:12:10,406 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c [2022-11-21 09:12:10,436 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/data/76de4bb6e/624142b951154e969defc84f99177a10/FLAGc2fe1e533 [2022-11-21 09:12:10,452 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/data/76de4bb6e/624142b951154e969defc84f99177a10 [2022-11-21 09:12:10,455 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-21 09:12:10,456 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-21 09:12:10,458 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-21 09:12:10,458 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-21 09:12:10,462 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-21 09:12:10,463 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 09:12:10" (1/1) ... [2022-11-21 09:12:10,464 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4fbb116c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:10, skipping insertion in model container [2022-11-21 09:12:10,464 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 09:12:10" (1/1) ... [2022-11-21 09:12:10,472 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-21 09:12:10,538 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-21 09:12:11,123 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c[55726,55739] [2022-11-21 09:12:11,153 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 09:12:11,167 INFO L203 MainTranslator]: Completed pre-run [2022-11-21 09:12:11,257 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c[55726,55739] [2022-11-21 09:12:11,306 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 09:12:11,350 INFO L208 MainTranslator]: Completed translation [2022-11-21 09:12:11,351 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11 WrapperNode [2022-11-21 09:12:11,352 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-21 09:12:11,353 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-21 09:12:11,353 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-21 09:12:11,353 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-21 09:12:11,361 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:11,388 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:11,691 INFO L138 Inliner]: procedures = 92, calls = 346, calls flagged for inlining = 199, calls inlined = 748, statements flattened = 23025 [2022-11-21 09:12:11,691 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-21 09:12:11,692 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-21 09:12:11,692 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-21 09:12:11,692 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-21 09:12:11,702 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:11,702 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:11,753 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:11,753 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:12,021 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:12,128 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:12,152 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:12,286 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:12,347 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-21 09:12:12,350 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-21 09:12:12,350 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-21 09:12:12,351 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-21 09:12:12,352 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (1/1) ... [2022-11-21 09:12:12,358 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:12:12,368 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:12:12,381 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:12:12,383 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-21 09:12:12,418 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-21 09:12:12,418 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-21 09:12:12,418 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-21 09:12:12,418 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-21 09:12:12,651 INFO L235 CfgBuilder]: Building ICFG [2022-11-21 09:12:12,653 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-21 09:12:22,147 INFO L276 CfgBuilder]: Performing block encoding [2022-11-21 09:12:22,201 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-21 09:12:22,201 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-21 09:12:22,209 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 09:12:22 BoogieIcfgContainer [2022-11-21 09:12:22,209 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-21 09:12:22,210 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-21 09:12:22,210 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-21 09:12:22,214 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-21 09:12:22,215 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-21 09:12:22,215 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 21.11 09:12:10" (1/3) ... [2022-11-21 09:12:22,216 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5a1b0148 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.11 09:12:22, skipping insertion in model container [2022-11-21 09:12:22,216 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-21 09:12:22,216 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 09:12:11" (2/3) ... [2022-11-21 09:12:22,217 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5a1b0148 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.11 09:12:22, skipping insertion in model container [2022-11-21 09:12:22,217 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-21 09:12:22,217 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 09:12:22" (3/3) ... [2022-11-21 09:12:22,218 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product19.cil.c [2022-11-21 09:12:22,359 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-21 09:12:22,359 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-21 09:12:22,359 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-21 09:12:22,359 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-21 09:12:22,359 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-21 09:12:22,360 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-21 09:12:22,360 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-21 09:12:22,360 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-21 09:12:22,385 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6433 states, 6432 states have (on average 1.864894278606965) internal successors, (11995), 6432 states have internal predecessors, (11995), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:22,530 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1302 [2022-11-21 09:12:22,531 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-21 09:12:22,531 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-21 09:12:22,549 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:22,549 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:22,550 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-21 09:12:22,565 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6433 states, 6432 states have (on average 1.864894278606965) internal successors, (11995), 6432 states have internal predecessors, (11995), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:22,647 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1302 [2022-11-21 09:12:22,647 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-21 09:12:22,647 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-21 09:12:22,653 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:22,653 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:22,663 INFO L748 eck$LassoCheckResult]: Stem: 5194#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3179#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2434#L2470true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5869#L2463true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 5124#L2478true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1185#L395true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1206#L368true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2456#L2845true assume { :end_inline_initFloors } true; 1905#L845true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1079#L2373true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1991#L2398true bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4078#L3123true assume 0 == initPersonOnFloor_~floor#1; 5675#L3124true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 678#L3231-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1104#L2915true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 483#L2927-2true assume { :end_inline_callOnFloor } true; 4755#L3267true assume { :end_inline_initPersonOnFloor } true; 4253#L113true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1221#L1029true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 2327#L1081true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 2630#L2507true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 990#L2569true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1098#L1046-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1065#L1067-5true __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 1226#L2573true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 3424#L2613true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5360#L2852true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 949#L2879true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 4739#L2316true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 4520#L1698true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4177#L1029-1true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 5789#L1702true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 637#L1715true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 2991#L1853true assume !(0 != timeShift_~tmp___9~2#1); 4460#L1944true assume !(1 == ~doorState~0); 4357#L1944-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4658#L2852-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2257#L2879-3true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 230#L2316-1true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 6000#L1581true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1270#L1029-2true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1885#L1594true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 3245#L1952true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 1764#L1638true assume !(1 == ~currentHeading~0); 3612#L1648true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6098#L1648-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1694#L1654-1true assume { :end_inline_continueInDirection } true; 4498#L1961-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 4367#L2638true assume !(-1 == ~expectedDirection~0); 4718#L2650true assume !(1 == ~expectedDirection~0); 5765#L2651true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 838#L1976true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 506#L1029-4true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 5699#L1081-3true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 4032#L2507-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 5857#L2508-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1603#L1046-12true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 4822#L1067-12true __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 2751#L2512-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 4873#L2613-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2582#L2852-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5549#L2879-25true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 4770#L2316-3true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 552#L1698-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1476#L1029-5true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 2768#L1702-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 4795#L1715-1true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 2750#L1853-2true assume !(0 != timeShift_~tmp___9~2#1); 479#L1944-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1889#L1944-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 757#L2852-28true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 946#L2879-28true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 5853#L2316-4true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 3472#L1581-2true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4045#L1029-6true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 2065#L1594-2true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 5819#L1952-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 2558#L1638-3true assume !(1 == ~currentHeading~0); 4224#L1648-9true assume !(0 == ~currentFloorID~0); 4442#L1648-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4240#L1654-7true assume { :end_inline_continueInDirection } true; 3558#L1961-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 958#L2638-1true assume !(-1 == ~expectedDirection~0); 1948#L2650-1true assume !(1 == ~expectedDirection~0); 6153#L2651-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1204#L1976-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 3897#L1029-8true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 3627#L1081-6true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 5972#L2507-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 5013#L2508-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 2211#L1046-24true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 672#L1067-24true __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 5414#L2512-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 4489#L2613-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2954#L2852-50true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3878#L2879-50true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 5802#L2316-6true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 3739#L1698-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 2176#L1029-9true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 3922#L1702-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 3148#L1715-2true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 1996#L1853-4true assume !(0 != timeShift_~tmp___9~2#1); 4317#L1944-6true assume !(1 == ~doorState~0); 3639#L1944-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3455#L2852-53true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3780#L2879-53true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2228#L2316-7true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 3329#L1581-4true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 5808#L1029-10true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1157#L1594-4true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1382#L1952-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 4455#L1638-6true assume !(1 == ~currentHeading~0); 4151#L1648-18true assume !(0 == ~currentFloorID~0); 5882#L1648-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2836#L1654-13true assume { :end_inline_continueInDirection } true; 2287#L1961-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2451#L2638-2true assume !(-1 == ~expectedDirection~0); 3840#L2650-2true assume !(1 == ~expectedDirection~0); 6055#L2651-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 525#L1976-2true assume { :end_inline_timeShift } true; 4713#L181true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 3863#L2373-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1202#L2398-1true bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5173#L3123-1true assume 0 == initPersonOnFloor_~floor#1; 3386#L3124-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 379#L3231-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5413#L2915-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4776#L2927-5true assume { :end_inline_callOnFloor } true; 3776#L3267-1true assume { :end_inline_initPersonOnFloor } true; 2023#L113-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1812#L1029-12true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1671#L1081-9true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 4885#L2507-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 4331#L2508-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 2129#L1046-36true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 4332#L1067-36true __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 5984#L2512-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 3934#L2613-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4989#L2852-75true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 744#L2879-75true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2416#L2316-9true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 2960#L1698-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 603#L1029-13true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 4051#L1702-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 3716#L1715-3true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 4782#L1853-6true assume !(0 != timeShift_~tmp___9~2#1); 3028#L1944-9true assume 1 == ~doorState~0;~doorState~0 := 0; 5461#L1944-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2010#L2852-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5876#L2879-78true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 4335#L2316-10true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 4112#L1581-6true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 5463#L1029-14true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 456#L1594-6true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 2983#L1952-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 2720#L1638-9true assume !(1 == ~currentHeading~0); 3211#L1648-27true assume !(0 == ~currentFloorID~0); 4832#L1648-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1462#L1654-19true assume { :end_inline_continueInDirection } true; 5798#L1961-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2161#L2638-3true assume !(-1 == ~expectedDirection~0); 3412#L2650-3true assume !(1 == ~expectedDirection~0); 3319#L2651-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 132#L1976-3true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1588#L198-2true [2022-11-21 09:12:22,666 INFO L750 eck$LassoCheckResult]: Loop: 1588#L198-2true assume !false; 2972#L199true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3613#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 470#L876true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2037#L206true assume 1 != cleanup_~tmp___0~0#1; 4610#L206-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2095#L2852-100true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3939#L2879-100true anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 1050#L1137true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 3618#L1201true isIdle_#t~ret48#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 6116#L1214true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 550#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 5874#L1029-16true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 489#L1081-12true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 2275#L2507-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 5535#L2569-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 675#L1046-53true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 4419#L1067-53true __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 181#L2573-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1974#L2613-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3849#L2852-105true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4428#L2879-105true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 5781#L2316-12true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1246#L1698-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1538#L1029-17true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 5192#L1702-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2905#L1715-4true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 2827#L1853-8true assume !(0 != timeShift_~tmp___9~2#1); 5725#L1944-12true assume 1 == ~doorState~0;~doorState~0 := 0; 1124#L1944-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4208#L2852-108true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1811#L2879-108true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1664#L2316-13true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 1821#L1581-8true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 3667#L1029-18true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 3947#L1594-8true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1461#L1952-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 4501#L1638-12true assume !(1 == ~currentHeading~0); 2921#L1648-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4281#L1648-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1565#L1654-25true assume { :end_inline_continueInDirection } true; 3962#L1961-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 3708#L2638-4true assume !(-1 == ~expectedDirection~0); 3280#L2650-4true assume !(1 == ~expectedDirection~0); 4469#L2651-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3865#L1976-4true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1588#L198-2true [2022-11-21 09:12:22,672 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:22,672 INFO L85 PathProgramCache]: Analyzing trace with hash 75480465, now seen corresponding path program 1 times [2022-11-21 09:12:22,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:22,682 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501964931] [2022-11-21 09:12:22,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:22,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:22,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:23,421 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:23,422 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:23,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501964931] [2022-11-21 09:12:23,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [501964931] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:23,424 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:23,424 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-21 09:12:23,426 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792996311] [2022-11-21 09:12:23,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:23,431 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-21 09:12:23,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:23,432 INFO L85 PathProgramCache]: Analyzing trace with hash 241664012, now seen corresponding path program 1 times [2022-11-21 09:12:23,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:23,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873679863] [2022-11-21 09:12:23,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:23,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:23,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:23,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:23,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:23,575 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873679863] [2022-11-21 09:12:23,576 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873679863] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:23,576 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:23,576 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-21 09:12:23,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [36163275] [2022-11-21 09:12:23,577 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:23,578 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-21 09:12:23,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 09:12:23,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-21 09:12:23,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-21 09:12:23,679 INFO L87 Difference]: Start difference. First operand has 6433 states, 6432 states have (on average 1.864894278606965) internal successors, (11995), 6432 states have internal predecessors, (11995), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 7 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:35,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 09:12:35,048 INFO L93 Difference]: Finished difference Result 67844 states and 126008 transitions. [2022-11-21 09:12:35,049 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 67844 states and 126008 transitions. [2022-11-21 09:12:35,755 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 11595 [2022-11-21 09:12:36,170 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 67844 states to 67602 states and 125739 transitions. [2022-11-21 09:12:36,172 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 67602 [2022-11-21 09:12:36,276 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 67602 [2022-11-21 09:12:36,277 INFO L73 IsDeterministic]: Start isDeterministic. Operand 67602 states and 125739 transitions. [2022-11-21 09:12:36,399 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-21 09:12:36,399 INFO L218 hiAutomatonCegarLoop]: Abstraction has 67602 states and 125739 transitions. [2022-11-21 09:12:36,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67602 states and 125739 transitions. [2022-11-21 09:12:37,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67602 to 21376. [2022-11-21 09:12:37,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21376 states, 21376 states have (on average 1.8590475299401197) internal successors, (39739), 21375 states have internal predecessors, (39739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:37,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21376 states to 21376 states and 39739 transitions. [2022-11-21 09:12:37,618 INFO L240 hiAutomatonCegarLoop]: Abstraction has 21376 states and 39739 transitions. [2022-11-21 09:12:37,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-21 09:12:37,623 INFO L428 stractBuchiCegarLoop]: Abstraction has 21376 states and 39739 transitions. [2022-11-21 09:12:37,624 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-21 09:12:37,624 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21376 states and 39739 transitions. [2022-11-21 09:12:37,738 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 4805 [2022-11-21 09:12:37,738 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-21 09:12:37,738 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-21 09:12:37,746 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:37,747 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:37,748 INFO L748 eck$LassoCheckResult]: Stem: 80753#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 79414#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 78598#L2470 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 78599#L2463 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 80726#L2478 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 76809#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 76810#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 76843#L2845 assume { :end_inline_initFloors } true; 77903#L845 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 76616#L2373 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 76606#L2398 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 78031#L3123 assume 0 == initPersonOnFloor_~floor#1; 80126#L3124 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 74914#L3231-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 75879#L2915 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 75474#L2927-2 assume { :end_inline_callOnFloor } true; 75475#L3267 assume { :end_inline_initPersonOnFloor } true; 80255#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 76870#L1029 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 76871#L1081 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 78466#L2507 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 76452#L2569 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 76453#L1046-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 74532#L1067-5 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 76592#L2573 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 74634#L2613 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 79651#L2852 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 76380#L2879 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 76381#L2316 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 80435#L1698 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 80197#L1029-1 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 80198#L1702 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 75793#L1715 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 75794#L1853 assume !(0 != timeShift_~tmp___9~2#1); 79227#L1944 assume !(1 == ~doorState~0); 80340#L1944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 80341#L2852-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 78388#L2879-3 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 74911#L2316-1 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 74912#L1581 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 76949#L1029-2 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 76950#L1594 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 77878#L1952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 77708#L1638 assume !(1 == ~currentHeading~0); 77709#L1648 assume !(0 == ~currentFloorID~0); 79794#L1648-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77610#L1654-1 assume { :end_inline_continueInDirection } true; 77611#L1961-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 87833#L2638 assume !(-1 == ~expectedDirection~0); 87814#L2650 assume !(1 == ~expectedDirection~0); 87804#L2651 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 87801#L1976 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 87794#L1029-4 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 87787#L1081-3 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 87784#L2507-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 87781#L2508-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 87754#L1046-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 87749#L1067-12 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 87713#L2512-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 87696#L2613-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 87695#L2852-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 81157#L2879-25 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 87694#L2316-3 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 87692#L1698-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 87691#L1029-5 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 87690#L1702-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 76943#L1715-1 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 78959#L1853-2 assume !(0 != timeShift_~tmp___9~2#1); 75464#L1944-3 assume 1 == ~doorState~0;~doorState~0 := 0; 75465#L1944-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 76030#L2852-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 76031#L2879-28 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 80960#L2316-4 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 80961#L1581-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 80108#L1029-6 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 78135#L1594-2 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 78136#L1952-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 78740#L1638-3 assume !(1 == ~currentHeading~0); 78741#L1648-9 assume !(0 == ~currentFloorID~0); 79088#L1648-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 80242#L1654-7 assume { :end_inline_continueInDirection } true; 74690#L1961-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 91936#L2638-1 assume !(-1 == ~expectedDirection~0); 91933#L2650-1 assume !(1 == ~expectedDirection~0); 91927#L2651-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 87633#L1976-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 87632#L1029-8 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 87631#L1081-6 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 87629#L2507-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 87628#L2508-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 87597#L1046-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 87573#L1067-24 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 87553#L2512-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 83076#L2613-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 81697#L2852-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 81696#L2879-50 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 81689#L2316-6 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 81629#L1698-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 81628#L1029-9 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 81627#L1702-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 79181#L1715-2 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 78034#L1853-4 assume !(0 != timeShift_~tmp___9~2#1); 78035#L1944-6 assume !(1 == ~doorState~0); 79823#L1944-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 79824#L2852-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 79931#L2879-53 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 79932#L2316-7 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 79570#L1581-4 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 79572#L1029-10 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 76756#L1594-4 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 76757#L1952-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 95557#L1638-6 assume !(1 == ~currentHeading~0); 80176#L1648-18 assume !(0 == ~currentFloorID~0); 79129#L1648-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79055#L1654-13 assume { :end_inline_continueInDirection } true; 78629#L1961-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 92554#L2638-2 assume !(-1 == ~expectedDirection~0); 92550#L2650-2 assume !(1 == ~expectedDirection~0); 92548#L2651-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 92541#L1976-2 assume { :end_inline_timeShift } true; 92539#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 92336#L2373-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 92334#L2398-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 92040#L3123-1 assume 0 == initPersonOnFloor_~floor#1; 91962#L3124-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 91950#L3231-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 91943#L2915-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 91938#L2927-5 assume { :end_inline_callOnFloor } true; 91926#L3267-1 assume { :end_inline_initPersonOnFloor } true; 87671#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 87670#L1029-12 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 87669#L1081-9 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 87667#L2507-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 87666#L2508-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 78212#L1046-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 74876#L1067-36 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 80320#L2512-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 81593#L2613-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 81189#L2852-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 81186#L2879-75 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 81180#L2316-9 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 81173#L1698-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 81172#L1029-13 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 81171#L1702-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 80114#L1715-3 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 95023#L1853-6 assume !(0 != timeShift_~tmp___9~2#1); 79263#L1944-9 assume 1 == ~doorState~0;~doorState~0 := 0; 79264#L1944-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 78055#L2852-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 78056#L2879-78 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 80322#L2316-10 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 80323#L1581-6 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 80851#L1029-14 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 75417#L1594-6 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 75418#L1952-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 95467#L1638-9 assume !(1 == ~currentHeading~0); 79454#L1648-27 assume !(0 == ~currentFloorID~0); 76424#L1648-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77272#L1654-19 assume { :end_inline_continueInDirection } true; 77273#L1961-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 78254#L2638-3 assume !(-1 == ~expectedDirection~0); 77699#L2650-3 assume !(1 == ~expectedDirection~0); 77479#L2651-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 74673#L1976-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 74674#L198-2 [2022-11-21 09:12:37,750 INFO L750 eck$LassoCheckResult]: Loop: 74674#L198-2 assume !false; 77468#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 79205#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 75444#L876 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 75445#L206 assume 1 != cleanup_~tmp___0~0#1; 78093#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 80485#L2852-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 93598#L2879-100 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 76565#L1137 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 74858#L1201 isIdle_#t~ret48#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 79800#L1214 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 81005#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 93449#L1029-16 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 91893#L1081-12 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 91878#L2507-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 91873#L2569-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 91874#L1046-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 91899#L1067-53 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 91853#L2573-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 83724#L2613-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 83723#L2852-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 83713#L2879-105 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 83710#L2316-12 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 83700#L1698-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 83699#L1029-17 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 83698#L1702-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 76989#L1715-4 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 79042#L1853-8 assume !(0 != timeShift_~tmp___9~2#1); 79043#L1944-12 assume 1 == ~doorState~0;~doorState~0 := 0; 76690#L1944-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 76691#L2852-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 77773#L2879-108 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 77774#L2316-13 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 77787#L1581-8 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 77788#L1029-18 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 95641#L1594-8 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 95639#L1952-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 95640#L1638-12 assume !(1 == ~currentHeading~0); 79149#L1648-36 assume !(0 == ~currentFloorID~0); 79150#L1648-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 77434#L1654-25 assume { :end_inline_continueInDirection } true; 76242#L1961-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 79871#L2638-4 assume !(-1 == ~expectedDirection~0); 77228#L2650-4 assume !(1 == ~expectedDirection~0); 74369#L2651-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 79994#L1976-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 74674#L198-2 [2022-11-21 09:12:37,751 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:37,752 INFO L85 PathProgramCache]: Analyzing trace with hash -1017154737, now seen corresponding path program 1 times [2022-11-21 09:12:37,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:37,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1149246465] [2022-11-21 09:12:37,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:37,753 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:37,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:38,220 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:38,221 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:38,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1149246465] [2022-11-21 09:12:38,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1149246465] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:38,226 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:38,226 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-21 09:12:38,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [823656026] [2022-11-21 09:12:38,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:38,229 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-21 09:12:38,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:38,232 INFO L85 PathProgramCache]: Analyzing trace with hash -567682614, now seen corresponding path program 1 times [2022-11-21 09:12:38,233 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:38,233 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [147225605] [2022-11-21 09:12:38,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:38,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:38,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:38,342 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:38,343 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:38,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [147225605] [2022-11-21 09:12:38,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [147225605] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:38,344 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:38,345 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-21 09:12:38,345 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [910759687] [2022-11-21 09:12:38,345 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:38,346 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-21 09:12:38,346 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 09:12:38,346 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-21 09:12:38,347 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-21 09:12:38,348 INFO L87 Difference]: Start difference. First operand 21376 states and 39739 transitions. cyclomatic complexity: 18366 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:39,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 09:12:39,302 INFO L93 Difference]: Finished difference Result 36098 states and 66789 transitions. [2022-11-21 09:12:39,302 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 36098 states and 66789 transitions. [2022-11-21 09:12:39,486 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 8744 [2022-11-21 09:12:39,785 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 36098 states to 36098 states and 66789 transitions. [2022-11-21 09:12:39,786 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36098 [2022-11-21 09:12:39,814 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36098 [2022-11-21 09:12:39,815 INFO L73 IsDeterministic]: Start isDeterministic. Operand 36098 states and 66789 transitions. [2022-11-21 09:12:39,858 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-21 09:12:39,859 INFO L218 hiAutomatonCegarLoop]: Abstraction has 36098 states and 66789 transitions. [2022-11-21 09:12:39,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36098 states and 66789 transitions. [2022-11-21 09:12:40,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36098 to 34972. [2022-11-21 09:12:40,644 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34972 states, 34972 states have (on average 1.8571142628388424) internal successors, (64947), 34971 states have internal predecessors, (64947), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:40,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34972 states to 34972 states and 64947 transitions. [2022-11-21 09:12:40,726 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34972 states and 64947 transitions. [2022-11-21 09:12:40,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-21 09:12:40,727 INFO L428 stractBuchiCegarLoop]: Abstraction has 34972 states and 64947 transitions. [2022-11-21 09:12:40,728 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-21 09:12:40,728 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34972 states and 64947 transitions. [2022-11-21 09:12:40,853 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 8292 [2022-11-21 09:12:40,853 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-21 09:12:40,853 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-21 09:12:40,863 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:40,863 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:40,866 INFO L748 eck$LassoCheckResult]: Stem: 138337#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 136928#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 136099#L2470 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 136100#L2463 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 138307#L2478 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 134290#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 134291#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 134326#L2845 assume { :end_inline_initFloors } true; 135395#L845 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 134100#L2373 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 134090#L2398 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 135523#L3123 assume 0 == initPersonOnFloor_~floor#1; 137672#L3124 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 132404#L3231-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 133360#L2915 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 132962#L2927-2 assume { :end_inline_callOnFloor } true; 132963#L3267 assume { :end_inline_initPersonOnFloor } true; 137815#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 134354#L1029 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 134355#L1081 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 135964#L2507 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 133935#L2569 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 133936#L1046-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 132025#L1067-5 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 134076#L2573 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 134365#L2613 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 137164#L2852 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 133863#L2879 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 133864#L2316 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 138004#L1698 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 137748#L1029-1 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 137749#L1702 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 133276#L1715 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 133277#L1853 assume !(0 != timeShift_~tmp___9~2#1); 136742#L1944 assume !(1 == ~doorState~0); 137900#L1944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 137901#L2852-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 135882#L2879-3 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 132401#L2316-1 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 132402#L1581 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 134437#L1029-2 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 134438#L1594 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 135372#L1952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 135199#L1638 assume !(1 == ~currentHeading~0); 135200#L1648 assume !(0 == ~currentFloorID~0); 138631#L1648-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 138632#L1654-1 assume { :end_inline_continueInDirection } true; 157542#L1961-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 157541#L2638 assume !(-1 == ~expectedDirection~0); 155269#L2650 assume !(1 == ~expectedDirection~0); 155267#L2651 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 153466#L1976 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 149131#L1029-4 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 149062#L1081-3 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 148876#L2507-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 138885#L2569-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 148870#L1046-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 153027#L1067-17 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 152982#L2573-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 152981#L2613-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 152980#L2852-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 138480#L2879-25 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 138145#L2316-3 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 133098#L1698-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 133099#L1029-5 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 134785#L1702-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 152948#L1715-1 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 152946#L1853-2 assume !(0 != timeShift_~tmp___9~2#1); 132952#L1944-3 assume 1 == ~doorState~0;~doorState~0 := 0; 132953#L1944-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 133511#L2852-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 133512#L2879-28 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 133859#L2316-4 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 137211#L1581-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 137212#L1029-6 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 164466#L1594-2 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 164467#L1952-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 164940#L1638-3 assume !(1 == ~currentHeading~0); 137787#L1648-9 assume !(0 == ~currentFloorID~0); 136599#L1648-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 165156#L1654-7 assume { :end_inline_continueInDirection } true; 165155#L1961-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 165153#L2638-1 assume !(-1 == ~expectedDirection~0); 163682#L2650-1 assume !(1 == ~expectedDirection~0); 162035#L2651-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 134323#L1976-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 134324#L1029-8 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 137344#L1081-6 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 137345#L2507-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 136850#L2569-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 136852#L1046-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 132653#L1067-29 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 138367#L2573-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 133617#L2613-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 137983#L2852-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 146043#L2879-50 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 146041#L2316-6 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 146038#L1698-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 145725#L1029-9 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 145719#L1702-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 136697#L1715-2 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 135526#L1853-4 assume !(0 != timeShift_~tmp___9~2#1); 135528#L1944-6 assume !(1 == ~doorState~0); 137354#L1944-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 137193#L2852-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 137194#L2879-53 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 135847#L2316-7 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 135848#L1581-4 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 137085#L1029-10 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 131975#L1594-4 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 155291#L1952-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 155292#L1638-6 assume !(1 == ~currentHeading~0); 148373#L1648-18 assume !(0 == ~currentFloorID~0); 148368#L1648-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 148093#L1654-13 assume { :end_inline_continueInDirection } true; 156401#L1961-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 156399#L2638-2 assume !(-1 == ~expectedDirection~0); 155272#L2650-2 assume !(1 == ~expectedDirection~0); 151925#L2651-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 151924#L1976-2 assume { :end_inline_timeShift } true; 151923#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 151917#L2373-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 151916#L2398-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 149275#L3123-1 assume 0 == initPersonOnFloor_~floor#1; 147201#L3124-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 147190#L3231-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 147185#L2915-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 147180#L2927-5 assume { :end_inline_callOnFloor } true; 147178#L3267-1 assume { :end_inline_initPersonOnFloor } true; 146059#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 145959#L1029-12 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 145958#L1081-9 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 145952#L2507-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 145947#L2569-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 145933#L1046-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 145924#L1067-41 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 145889#L2573-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 145887#L2613-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 145886#L2852-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 144721#L2879-75 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 145885#L2316-9 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 145840#L1698-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 145841#L1029-13 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 145717#L1702-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 137658#L1715-3 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 147016#L1853-6 assume !(0 != timeShift_~tmp___9~2#1); 147013#L1944-9 assume 1 == ~doorState~0;~doorState~0 := 0; 146994#L1944-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 146988#L2852-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 138576#L2879-78 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 137882#L2316-10 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 137698#L1581-6 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 137699#L1029-14 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 132905#L1594-6 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 132906#L1952-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 136421#L1638-9 assume !(1 == ~currentHeading~0); 136422#L1648-27 assume !(0 == ~currentFloorID~0); 133906#L1648-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134764#L1654-19 assume { :end_inline_continueInDirection } true; 134765#L1961-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 135743#L2638-3 assume !(-1 == ~expectedDirection~0); 135190#L2650-3 assume !(1 == ~expectedDirection~0); 134971#L2651-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 132164#L1976-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 132165#L198-2 [2022-11-21 09:12:40,867 INFO L750 eck$LassoCheckResult]: Loop: 132165#L198-2 assume !false; 134960#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 136722#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 132932#L876 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 132933#L206 assume 1 != cleanup_~tmp___0~0#1; 135587#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 135665#L2852-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 135666#L2879-100 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 134050#L1137 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 132348#L1201 isIdle_#t~ret48#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 137331#L1214 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 133093#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 133094#L1029-16 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 132972#L1081-12 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 132973#L2507-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 135904#L2569-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 138474#L1046-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 142583#L1067-53 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 142572#L2573-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 142569#L2613-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 142563#L2852-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 140377#L2879-105 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 142551#L2316-12 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 142548#L1698-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 142549#L1029-17 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 142634#L1702-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 136646#L1715-4 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 136647#L1853-8 assume !(0 != timeShift_~tmp___9~2#1); 138529#L1944-12 assume 1 == ~doorState~0;~doorState~0 := 0; 138530#L1944-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 137774#L2852-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 135264#L2879-108 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 135069#L2316-13 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 135070#L1581-8 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 135277#L1029-18 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 137377#L1594-8 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 134761#L1952-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 134762#L1638-12 assume !(1 == ~currentHeading~0); 148760#L1648-36 assume !(0 == ~currentFloorID~0); 138547#L1648-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 146892#L1654-25 assume { :end_inline_continueInDirection } true; 157613#L1961-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 137401#L2638-4 assume !(-1 == ~expectedDirection~0); 134718#L2650-4 assume !(1 == ~expectedDirection~0); 131858#L2651-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 137529#L1976-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 132165#L198-2 [2022-11-21 09:12:40,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:40,868 INFO L85 PathProgramCache]: Analyzing trace with hash -745847904, now seen corresponding path program 1 times [2022-11-21 09:12:40,868 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:40,868 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [676535489] [2022-11-21 09:12:40,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:40,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:40,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:41,081 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:41,082 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:41,082 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [676535489] [2022-11-21 09:12:41,082 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [676535489] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:41,082 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:41,082 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-21 09:12:41,083 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163569909] [2022-11-21 09:12:41,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:41,084 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-21 09:12:41,084 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:41,084 INFO L85 PathProgramCache]: Analyzing trace with hash 1207324748, now seen corresponding path program 1 times [2022-11-21 09:12:41,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:41,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558577853] [2022-11-21 09:12:41,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:41,085 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:41,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:41,122 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:41,122 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:41,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558577853] [2022-11-21 09:12:41,123 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558577853] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:41,123 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:41,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 09:12:41,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1294582918] [2022-11-21 09:12:41,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:41,124 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-21 09:12:41,125 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 09:12:41,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-21 09:12:41,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 09:12:41,126 INFO L87 Difference]: Start difference. First operand 34972 states and 64947 transitions. cyclomatic complexity: 29978 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:41,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 09:12:41,780 INFO L93 Difference]: Finished difference Result 55166 states and 102384 transitions. [2022-11-21 09:12:41,780 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55166 states and 102384 transitions. [2022-11-21 09:12:42,332 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12905 [2022-11-21 09:12:42,682 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55166 states to 55166 states and 102384 transitions. [2022-11-21 09:12:42,682 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55166 [2022-11-21 09:12:42,729 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55166 [2022-11-21 09:12:42,729 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55166 states and 102384 transitions. [2022-11-21 09:12:42,783 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-21 09:12:42,783 INFO L218 hiAutomatonCegarLoop]: Abstraction has 55166 states and 102384 transitions. [2022-11-21 09:12:42,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55166 states and 102384 transitions. [2022-11-21 09:12:43,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55166 to 54407. [2022-11-21 09:12:43,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54407 states, 54407 states have (on average 1.8578124138438068) internal successors, (101078), 54406 states have internal predecessors, (101078), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:12:43,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54407 states to 54407 states and 101078 transitions. [2022-11-21 09:12:43,987 INFO L240 hiAutomatonCegarLoop]: Abstraction has 54407 states and 101078 transitions. [2022-11-21 09:12:43,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-21 09:12:43,991 INFO L428 stractBuchiCegarLoop]: Abstraction has 54407 states and 101078 transitions. [2022-11-21 09:12:43,991 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-21 09:12:43,992 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 54407 states and 101078 transitions. [2022-11-21 09:12:44,122 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12564 [2022-11-21 09:12:44,122 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-21 09:12:44,122 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-21 09:12:44,128 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:44,128 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:12:44,129 INFO L748 eck$LassoCheckResult]: Stem: 228498#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 227081#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 226255#L2470 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 226256#L2463 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 228466#L2478 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 224454#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 224455#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 224490#L2845 assume { :end_inline_initFloors } true; 225548#L845 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 224264#L2373 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 224254#L2398 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 225676#L3123 assume 0 == initPersonOnFloor_~floor#1; 227830#L3124 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 222551#L3231-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 223521#L2915 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 223118#L2927-2 assume { :end_inline_callOnFloor } true; 223119#L3267 assume { :end_inline_initPersonOnFloor } true; 227970#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 224519#L1029 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 224520#L1081 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 226119#L2507 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 224096#L2569 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 224098#L2579 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 222669#L2590 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 222671#L2601 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 224758#L2612 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 228750#L2613 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 253577#L2852 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 253578#L2879 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 257120#L2316 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 257119#L1698 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 257118#L1029-1 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 257107#L1702 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 257106#L1715 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 257105#L1853 assume !(0 != timeShift_~tmp___9~2#1); 257104#L1944 assume !(1 == ~doorState~0); 257103#L1944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 257102#L2852-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 228891#L2879-3 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 257101#L2316-1 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 257100#L1581 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 224599#L1029-2 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 224600#L1594 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 225524#L1952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 227162#L1638 assume !(1 == ~currentHeading~0); 257555#L1648 assume !(0 == ~currentFloorID~0); 257554#L1648-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 257550#L1654-1 assume { :end_inline_continueInDirection } true; 257549#L1961-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 257543#L2638 assume !(-1 == ~expectedDirection~0); 257541#L2650 assume !(1 == ~expectedDirection~0); 254107#L2651 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 252549#L1976 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 252548#L1029-4 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 252547#L1081-3 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 252542#L2507-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 252540#L2569-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 252214#L2579-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 252207#L2590-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 252203#L2601-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 252109#L2612-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 252105#L2613-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 251276#L2852-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 251275#L2879-25 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 251274#L2316-3 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 251273#L1698-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 251272#L1029-5 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 251270#L1702-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 251271#L1715-1 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 252838#L1853-2 assume !(0 != timeShift_~tmp___9~2#1); 252833#L1944-3 assume 1 == ~doorState~0;~doorState~0 := 0; 252831#L1944-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 252827#L2852-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 252823#L2879-28 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 252817#L2316-4 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 252811#L1581-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 252274#L1029-6 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 252275#L1594-2 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 252268#L1952-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 252269#L1638-3 assume !(1 == ~currentHeading~0); 227942#L1648-9 assume !(0 == ~currentFloorID~0); 226756#L1648-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228111#L1654-7 assume { :end_inline_continueInDirection } true; 249922#L1961-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 249919#L2638-1 assume !(-1 == ~expectedDirection~0); 249920#L2650-1 assume !(1 == ~expectedDirection~0); 249910#L2651-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 249909#L1976-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 249908#L1029-8 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 249894#L1081-6 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 249893#L2507-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 229101#L2569-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 249874#L2579-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 249868#L2590-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 249872#L2601-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 249866#L2612-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 249870#L2613-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 271078#L2852-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 243481#L2879-50 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 271073#L2316-6 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 271070#L1698-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 271071#L1029-9 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 271081#L1702-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 227725#L1715-2 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 272142#L1853-4 assume !(0 != timeShift_~tmp___9~2#1); 272141#L1944-6 assume !(1 == ~doorState~0); 272139#L1944-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 272137#L2852-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 247266#L2879-53 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 272133#L2316-7 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 272131#L1581-4 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 228734#L1029-10 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 222118#L1594-4 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 224403#L1952-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 224788#L1638-6 assume !(1 == ~currentHeading~0); 227883#L1648-18 assume !(0 == ~currentFloorID~0); 226797#L1648-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228759#L1654-13 assume { :end_inline_continueInDirection } true; 271979#L1961-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 271978#L2638-2 assume !(-1 == ~expectedDirection~0); 271977#L2650-2 assume !(1 == ~expectedDirection~0); 225070#L2651-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 223196#L1976-2 assume { :end_inline_timeShift } true; 223197#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 227684#L2373-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 224016#L2398-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 224483#L3123-1 assume 0 == initPersonOnFloor_~floor#1; 227293#L3124-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 222146#L3231-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 222897#L2915-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 223757#L2927-5 assume { :end_inline_callOnFloor } true; 228302#L3267-1 assume { :end_inline_initPersonOnFloor } true; 263056#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 263055#L1029-12 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 263054#L1081-9 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 263053#L2507-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 229096#L2569-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 263049#L2579-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 263046#L2590-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 263043#L2601-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 263033#L2612-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 263032#L2613-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 263031#L2852-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 230343#L2879-75 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 263030#L2316-9 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 263029#L1698-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 263028#L1029-13 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 263027#L1702-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 225227#L1715-3 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 227565#L1853-6 assume !(0 != timeShift_~tmp___9~2#1); 226930#L1944-9 assume 1 == ~doorState~0;~doorState~0 := 0; 226931#L1944-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 225701#L2852-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 225702#L2879-78 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 228044#L2316-10 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 227856#L1581-6 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 227857#L1029-14 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 265696#L1594-6 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 226884#L1952-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 226585#L1638-9 assume !(1 == ~currentHeading~0); 226586#L1648-27 assume !(0 == ~currentFloorID~0); 224067#L1648-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 261677#L1654-19 assume { :end_inline_continueInDirection } true; 261670#L1961-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 261664#L2638-3 assume !(-1 == ~expectedDirection~0); 261657#L2650-3 assume !(1 == ~expectedDirection~0); 259955#L2651-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 259953#L1976-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 259951#L198-2 [2022-11-21 09:12:44,130 INFO L750 eck$LassoCheckResult]: Loop: 259951#L198-2 assume !false; 259950#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 259949#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 259948#L876 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 259947#L206 assume 1 != cleanup_~tmp___0~0#1; 259942#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 259937#L2852-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 259926#L2879-100 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 259918#L1137 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 259909#L1201 isIdle_#t~ret48#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 259908#L1214 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 259907#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 259906#L1029-16 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 259905#L1081-12 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 259904#L2507-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 229145#L2569-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 259876#L2579-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 228584#L2590-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 228585#L2601-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 259877#L2612-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 259875#L2613-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 261064#L2852-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 233112#L2879-105 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 261063#L2316-12 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 261061#L1698-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 261060#L1029-17 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 261059#L1702-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 224639#L1715-4 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 264025#L1853-8 assume !(0 != timeShift_~tmp___9~2#1); 264024#L1944-12 assume 1 == ~doorState~0;~doorState~0 := 0; 264023#L1944-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 261949#L2852-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 261946#L2879-108 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 261945#L2316-13 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 261942#L1581-8 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 261902#L1029-18 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 261736#L1594-8 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 261714#L1952-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 261715#L1638-12 assume !(1 == ~currentHeading~0); 228889#L1648-36 assume !(0 == ~currentFloorID~0); 228726#L1648-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 259966#L1654-25 assume { :end_inline_continueInDirection } true; 259963#L1961-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 259960#L2638-4 assume !(-1 == ~expectedDirection~0); 259956#L2650-4 assume !(1 == ~expectedDirection~0); 259954#L2651-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 259952#L1976-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 259951#L198-2 [2022-11-21 09:12:44,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:44,131 INFO L85 PathProgramCache]: Analyzing trace with hash -3327330, now seen corresponding path program 1 times [2022-11-21 09:12:44,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:44,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729430322] [2022-11-21 09:12:44,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:44,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:44,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:44,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:44,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:44,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1729430322] [2022-11-21 09:12:44,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1729430322] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:44,519 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:44,519 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-21 09:12:44,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1898366314] [2022-11-21 09:12:44,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:44,520 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-21 09:12:44,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:12:44,520 INFO L85 PathProgramCache]: Analyzing trace with hash 1371472453, now seen corresponding path program 1 times [2022-11-21 09:12:44,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:12:44,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [261053593] [2022-11-21 09:12:44,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:12:44,521 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:12:44,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:12:45,159 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:12:45,159 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:12:45,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [261053593] [2022-11-21 09:12:45,159 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [261053593] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:12:45,160 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:12:45,160 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2022-11-21 09:12:45,160 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436584662] [2022-11-21 09:12:45,160 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:12:45,160 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-21 09:12:45,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 09:12:45,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-21 09:12:45,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=233, Unknown=0, NotChecked=0, Total=272 [2022-11-21 09:12:45,161 INFO L87 Difference]: Start difference. First operand 54407 states and 101078 transitions. cyclomatic complexity: 46674 Second operand has 17 states, 17 states have (on average 2.764705882352941) internal successors, (47), 17 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:13:09,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 09:13:09,082 INFO L93 Difference]: Finished difference Result 108454 states and 197861 transitions. [2022-11-21 09:13:09,082 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 108454 states and 197861 transitions. [2022-11-21 09:13:09,643 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 25401 [2022-11-21 09:13:10,404 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 108454 states to 108454 states and 197861 transitions. [2022-11-21 09:13:10,405 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108454 [2022-11-21 09:13:10,506 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108454 [2022-11-21 09:13:10,506 INFO L73 IsDeterministic]: Start isDeterministic. Operand 108454 states and 197861 transitions. [2022-11-21 09:13:10,605 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-21 09:13:10,605 INFO L218 hiAutomatonCegarLoop]: Abstraction has 108454 states and 197861 transitions. [2022-11-21 09:13:10,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108454 states and 197861 transitions. [2022-11-21 09:13:11,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108454 to 83842. [2022-11-21 09:13:11,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83842 states, 83842 states have (on average 1.8362753751103265) internal successors, (153957), 83841 states have internal predecessors, (153957), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:13:12,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83842 states to 83842 states and 153957 transitions. [2022-11-21 09:13:12,010 INFO L240 hiAutomatonCegarLoop]: Abstraction has 83842 states and 153957 transitions. [2022-11-21 09:13:12,011 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-21 09:13:12,011 INFO L428 stractBuchiCegarLoop]: Abstraction has 83842 states and 153957 transitions. [2022-11-21 09:13:12,012 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-21 09:13:12,012 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 83842 states and 153957 transitions. [2022-11-21 09:13:12,659 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 19178 [2022-11-21 09:13:12,659 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-21 09:13:12,659 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-21 09:13:12,668 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:13:12,669 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:13:12,669 INFO L748 eck$LassoCheckResult]: Stem: 391745#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 390142#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 389268#L2470 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 389269#L2463 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 391706#L2478 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 387433#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 387434#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 387470#L2845 assume { :end_inline_initFloors } true; 388555#L845 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 387240#L2373 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 387230#L2398 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 388688#L3123 assume 0 == initPersonOnFloor_~floor#1; 390956#L3124 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 385537#L3231-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 386502#L2915 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 386104#L2927-2 assume { :end_inline_callOnFloor } true; 386105#L3267 assume { :end_inline_initPersonOnFloor } true; 391117#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 387496#L1029 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 387497#L1081 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 389131#L2507 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 387075#L2569 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 387076#L1046-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 385160#L1067-5 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 387215#L2573 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 387507#L2613 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 400064#L2852 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 400065#L2879 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 406879#L2316 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 406877#L1698 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 406878#L1029-1 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 406861#L1702 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 406860#L1715 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 406858#L1853 assume !(0 != timeShift_~tmp___9~2#1); 406857#L1944 assume !(1 == ~doorState~0); 406856#L1944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 392792#L2852-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 392425#L2879-3 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 392755#L2316-1 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 392756#L1581 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 392735#L1029-2 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 392736#L1594 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 392730#L1952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 392732#L1638 assume !(1 == ~currentHeading~0); 407528#L1648 assume !(0 == ~currentFloorID~0); 407521#L1648-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 407517#L1654-1 assume { :end_inline_continueInDirection } true; 392063#L1961-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 407515#L2638 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 406495#L1081-1 __utac_acc__Specification3_spec__2_#t~ret133#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11#1 := __utac_acc__Specification3_spec__2_#t~ret133#1;havoc __utac_acc__Specification3_spec__2_#t~ret133#1; 407514#L2642 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11#1); 405339#L2650 assume !(1 == ~expectedDirection~0); 403857#L2651 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 395122#L1976 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 395085#L1029-4 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 392880#L1081-3 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 392877#L2507-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 392239#L2569-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 392873#L2579-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 458493#L2590-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 458492#L2601-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 458491#L2612-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 458490#L2613-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 458489#L2852-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 405328#L2879-25 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 458488#L2316-3 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 458485#L1698-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret65#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~19#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~19#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 458475#L2852-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 458471#L2879-27 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1; 458465#L1671-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 387573#L1683-3 stopRequestedAtCurrentFloor_#t~ret69#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 387574#L1715-1 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 389646#L1853-2 assume !(0 != timeShift_~tmp___9~2#1); 386094#L1944-3 assume 1 == ~doorState~0;~doorState~0 := 0; 386095#L1944-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 386651#L2852-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 386652#L2879-28 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 386998#L2316-4 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 390453#L1581-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 390454#L1029-6 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 461104#L1594-2 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 459082#L1952-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 451043#L1638-3 assume !(1 == ~currentHeading~0); 451044#L1648-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 389788#L1648-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 434866#L1654-7 assume { :end_inline_continueInDirection } true; 434857#L1961-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 433945#L2638-1 assume !(-1 == ~expectedDirection~0); 433944#L2650-1 assume !(1 == ~expectedDirection~0); 433843#L2651-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 392669#L1976-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 392667#L1029-8 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 392665#L1081-6 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 392524#L2507-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 391641#L2508-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 388984#L1046-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 386486#L1067-24 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 386487#L2512-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 385066#L2613-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 394866#L2852-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 394865#L2879-50 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 394864#L2316-6 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 394861#L1698-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 394862#L1029-9 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 396735#L1702-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 393933#L1715-2 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 393913#L1853-4 assume !(0 != timeShift_~tmp___9~2#1); 393914#L1944-6 assume !(1 == ~doorState~0); 396690#L1944-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 396684#L2852-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 396682#L2879-53 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 396676#L2316-7 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 396673#L1581-4 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 396581#L1029-10 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 396579#L1594-4 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 396577#L1952-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 392244#L1638-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 392246#L3426-11 continueInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~18#1 := continueInDirection_#t~ret63#1;havoc continueInDirection_#t~ret63#1; 389827#L1642-18 assume !(0 != continueInDirection_~tmp~18#1); 389828#L1648-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 437806#L1654-13 assume { :end_inline_continueInDirection } true; 437805#L1961-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 437803#L2638-2 assume !(-1 == ~expectedDirection~0); 437802#L2650-2 assume !(1 == ~expectedDirection~0); 437794#L2651-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 437793#L1976-2 assume { :end_inline_timeShift } true; 437792#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 437786#L2373-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 437785#L2398-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 437783#L3123-1 assume 0 == initPersonOnFloor_~floor#1; 437755#L3124-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 437743#L3231-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 437735#L2915-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 437731#L2927-5 assume { :end_inline_callOnFloor } true; 437359#L3267-1 assume { :end_inline_initPersonOnFloor } true; 392692#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 392689#L1029-12 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 392686#L1081-9 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 392516#L2507-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 391187#L2508-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 388868#L1046-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 385498#L1067-36 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 392087#L2512-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 390337#L2613-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 393026#L2852-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 392941#L2879-75 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 393023#L2316-9 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 393020#L1698-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 393017#L1029-13 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 393011#L1702-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 392995#L1715-3 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 392996#L1853-6 assume !(0 != timeShift_~tmp___9~2#1); 392990#L1944-9 assume 1 == ~doorState~0;~doorState~0 := 0; 392991#L1944-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 392891#L2852-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 392887#L2879-78 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 392886#L2316-10 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 392883#L1581-6 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 392884#L1029-14 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 413275#L1594-6 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 413273#L1952-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 413274#L1638-9 assume !(1 == ~currentHeading~0); 436849#L1648-27 assume !(0 == ~currentFloorID~0); 412968#L1648-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 412136#L1654-19 assume { :end_inline_continueInDirection } true; 435798#L1961-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 435791#L2638-3 assume !(-1 == ~expectedDirection~0); 434864#L2650-3 assume !(1 == ~expectedDirection~0); 433825#L2651-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 413706#L1976-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 413703#L198-2 [2022-11-21 09:13:12,672 INFO L750 eck$LassoCheckResult]: Loop: 413703#L198-2 assume !false; 413701#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 413699#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 413697#L876 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 413695#L206 assume 1 != cleanup_~tmp___0~0#1; 413689#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 413687#L2852-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 413686#L2879-100 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 413654#L1137 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 413642#L1201 isIdle_#t~ret48#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 413641#L1214 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 413625#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 413624#L1029-16 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 413623#L1081-12 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 413622#L2507-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 392704#L2569-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 413611#L1046-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 413594#L1067-53 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 413586#L2573-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 413581#L2613-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 413580#L2852-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 413492#L2879-105 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 413579#L2316-12 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 413574#L1698-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 413576#L1029-17 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 413577#L1702-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 413578#L1715-4 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 414966#L1853-8 assume !(0 != timeShift_~tmp___9~2#1); 414818#L1944-12 assume 1 == ~doorState~0;~doorState~0 := 0; 414819#L1944-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 413900#L2852-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 413894#L2879-108 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 413892#L2316-13 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 413773#L1581-8 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 413765#L1029-18 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 413759#L1594-8 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 413752#L1952-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 413743#L1638-12 assume !(1 == ~currentHeading~0); 413739#L1648-36 assume !(0 == ~currentFloorID~0); 413736#L1648-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 413381#L1654-25 assume { :end_inline_continueInDirection } true; 413728#L1961-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 413727#L2638-4 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 413724#L1081-13 __utac_acc__Specification3_spec__2_#t~ret133#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11#1 := __utac_acc__Specification3_spec__2_#t~ret133#1;havoc __utac_acc__Specification3_spec__2_#t~ret133#1; 413726#L2642-8 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11#1); 413714#L2650-4 assume !(1 == ~expectedDirection~0); 413713#L2651-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 413705#L1976-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 413703#L198-2 [2022-11-21 09:13:12,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:13:12,673 INFO L85 PathProgramCache]: Analyzing trace with hash -445180089, now seen corresponding path program 1 times [2022-11-21 09:13:12,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:13:12,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714480812] [2022-11-21 09:13:12,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:13:12,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:13:12,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:13:12,853 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:13:12,853 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:13:12,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714480812] [2022-11-21 09:13:12,854 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1714480812] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:13:12,854 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:13:12,854 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-21 09:13:12,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462115111] [2022-11-21 09:13:12,854 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:13:12,855 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-21 09:13:12,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:13:12,855 INFO L85 PathProgramCache]: Analyzing trace with hash 169646705, now seen corresponding path program 1 times [2022-11-21 09:13:12,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:13:12,856 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [396795385] [2022-11-21 09:13:12,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:13:12,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:13:12,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-21 09:13:12,870 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-21 09:13:12,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-21 09:13:12,947 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-21 09:13:15,064 INFO L210 LassoAnalysis]: Preferences: [2022-11-21 09:13:15,064 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-21 09:13:15,064 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-21 09:13:15,065 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-21 09:13:15,065 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-21 09:13:15,065 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:15,065 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-21 09:13:15,065 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-21 09:13:15,065 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product19.cil.c_Iteration5_Loop [2022-11-21 09:13:15,066 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-21 09:13:15,066 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-21 09:13:15,100 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,110 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,113 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,123 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,126 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,129 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,132 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,136 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,143 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,147 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,149 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,153 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,155 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,176 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,178 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,181 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,186 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,194 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,197 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,199 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,201 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,204 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,207 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,209 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,217 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,221 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,224 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,227 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,242 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,244 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,246 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,249 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,258 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,260 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,262 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,265 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,271 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,274 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,276 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,278 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,281 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,285 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,288 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,293 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,295 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,297 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,300 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,302 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,304 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,306 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,310 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,319 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,322 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,343 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,345 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,347 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,350 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,352 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,354 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,357 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,359 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,361 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,364 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,371 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,380 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,382 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,384 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,391 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,395 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,397 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,399 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,404 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,409 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,416 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,419 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,422 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,425 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,427 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,430 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,432 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,435 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,438 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,440 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:15,443 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:16,218 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-21 09:13:16,219 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-21 09:13:16,221 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,222 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,226 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,230 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-11-21 09:13:16,232 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,232 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,270 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,270 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,279 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,279 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,279 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,281 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,287 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-11-21 09:13:16,287 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,287 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,299 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,300 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,303 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,303 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,303 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,304 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,315 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,315 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,316 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-11-21 09:13:16,354 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,355 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~14#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Honda state: {ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~14#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,388 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-11-21 09:13:16,388 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,388 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,407 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,466 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-11-21 09:13:16,467 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,467 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,493 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,494 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret48#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret48#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,515 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2022-11-21 09:13:16,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,515 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,522 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,532 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,532 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,537 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-11-21 09:13:16,550 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,550 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret91#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret91#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,555 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,555 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,555 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,557 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,559 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-11-21 09:13:16,560 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,560 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,581 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,581 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret130#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret130#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,587 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,587 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,588 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,589 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,590 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-11-21 09:13:16,591 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,592 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,603 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,603 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~18#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~18#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,606 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,606 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,606 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,607 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,623 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-11-21 09:13:16,624 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,624 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,643 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,643 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~tmp~15#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11#1=1, ULTIMATE.start_anyStopRequested_#res#1=1} Honda state: {ULTIMATE.start_isIdle_~tmp~15#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11#1=1, ULTIMATE.start_anyStopRequested_#res#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,647 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,647 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,647 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,648 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,649 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-11-21 09:13:16,651 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,651 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,662 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,662 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret47#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,667 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2022-11-21 09:13:16,667 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,667 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,668 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-11-21 09:13:16,671 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,671 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,682 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,683 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~6#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,687 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,687 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,687 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,688 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,691 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-11-21 09:13:16,692 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,692 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,712 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,712 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,718 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,719 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,719 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,723 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,731 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-11-21 09:13:16,731 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,731 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,745 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-21 09:13:16,745 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-21 09:13:16,748 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,748 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,748 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,749 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,751 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-11-21 09:13:16,752 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-21 09:13:16,752 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,784 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:16,785 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:16,785 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:16,786 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:16,795 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-21 09:13:16,796 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-21 09:13:16,808 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-11-21 09:13:17,336 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-21 09:13:17,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:17,344 INFO L210 LassoAnalysis]: Preferences: [2022-11-21 09:13:17,344 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-21 09:13:17,344 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-21 09:13:17,344 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-21 09:13:17,344 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-21 09:13:17,344 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:17,344 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-21 09:13:17,344 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-21 09:13:17,344 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product19.cil.c_Iteration5_Loop [2022-11-21 09:13:17,345 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-21 09:13:17,345 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-21 09:13:17,350 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,363 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,365 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,367 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,369 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,371 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,373 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,375 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,378 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,380 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,382 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,389 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,396 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,399 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,418 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,420 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,429 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,431 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,438 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,440 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,443 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,446 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,448 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,457 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,460 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,477 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,480 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,483 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,486 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,488 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,491 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,494 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,502 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,505 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,508 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,510 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,518 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,521 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,524 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,526 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,528 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,530 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,533 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,535 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,538 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,540 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,542 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,545 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,552 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,554 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,557 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,559 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,561 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,564 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,589 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,592 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,595 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,597 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,600 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,603 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,605 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,608 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,610 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,613 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,616 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,618 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,620 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,627 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,630 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,636 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,638 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,641 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,644 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,650 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,652 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,655 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,658 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,660 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,662 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,665 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,667 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,669 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,672 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:17,674 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-21 09:13:18,460 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-21 09:13:18,465 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-21 09:13:18,466 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,467 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,468 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,477 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,490 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,490 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,491 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,491 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,491 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,493 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,494 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-11-21 09:13:18,504 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,512 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,512 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,513 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,514 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,522 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,535 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,535 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,535 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,535 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,535 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,536 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,536 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,537 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-11-21 09:13:18,554 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,563 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,563 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,564 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,565 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,568 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,581 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,581 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,581 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,581 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,581 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,584 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,584 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,589 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-11-21 09:13:18,598 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,606 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,607 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,607 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,608 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,614 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,626 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,626 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,626 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,626 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,627 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,627 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,627 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,629 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-11-21 09:13:18,633 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,641 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,641 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,641 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,642 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,658 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-11-21 09:13:18,671 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,672 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,672 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,672 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,672 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,673 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,673 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,682 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,690 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,690 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,690 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,691 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,705 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,706 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-11-21 09:13:18,717 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,717 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,717 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,717 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,718 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,718 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,718 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,727 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,731 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,731 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,731 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,734 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,748 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,760 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,760 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,760 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,760 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,760 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,761 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,761 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-11-21 09:13:18,778 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,786 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,786 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,786 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,787 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,793 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,805 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,806 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,806 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,806 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,806 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,807 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,807 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,808 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-11-21 09:13:18,826 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,834 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,834 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,835 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,836 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,958 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-11-21 09:13:18,959 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:18,971 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:18,971 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:18,971 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:18,972 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:18,972 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:18,972 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:18,972 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:18,981 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:18,990 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:18,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:18,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:18,992 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:18,995 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2022-11-21 09:13:18,996 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:19,005 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:19,006 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:19,006 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:19,006 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:19,006 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:19,006 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:19,006 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:19,008 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:19,010 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:19,010 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:19,010 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:19,011 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:19,014 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2022-11-21 09:13:19,015 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:19,025 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:19,025 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:19,025 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:19,026 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:19,026 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:19,027 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:19,027 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:19,030 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:19,032 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Ended with exit code 0 [2022-11-21 09:13:19,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:19,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:19,033 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:19,034 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2022-11-21 09:13:19,036 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:19,046 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:19,046 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:19,046 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:19,046 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:19,047 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:19,048 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:19,048 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:19,058 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:19,060 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2022-11-21 09:13:19,061 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:19,061 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:19,062 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:19,063 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2022-11-21 09:13:19,069 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:19,080 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:19,080 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:19,080 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:19,080 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:19,081 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:19,081 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:19,081 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:19,082 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-21 09:13:19,085 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:19,085 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:19,085 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:19,086 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:19,088 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2022-11-21 09:13:19,089 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-21 09:13:19,099 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-21 09:13:19,100 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-21 09:13:19,100 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-21 09:13:19,100 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-21 09:13:19,100 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-21 09:13:19,103 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-21 09:13:19,103 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-21 09:13:19,126 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-21 09:13:19,148 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-11-21 09:13:19,148 INFO L444 ModelExtractionUtils]: 6 out of 9 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-11-21 09:13:19,150 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-21 09:13:19,150 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 09:13:19,179 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-21 09:13:19,184 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-21 09:13:19,184 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-21 09:13:19,184 INFO L513 LassoAnalysis]: Proved termination. [2022-11-21 09:13:19,184 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-11-21 09:13:19,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2022-11-21 09:13:19,199 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:19,202 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-21 09:13:19,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:13:19,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:13:19,463 INFO L263 TraceCheckSpWp]: Trace formula consists of 1153 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-21 09:13:19,469 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 09:13:19,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:13:19,807 INFO L263 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-21 09:13:19,809 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 09:13:20,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:13:20,035 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2022-11-21 09:13:20,037 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 83842 states and 153957 transitions. cyclomatic complexity: 70119 Second operand has 7 states, 7 states have (on average 31.142857142857142) internal successors, (218), 7 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:13:21,190 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bcbc6b5-8a23-429d-9fe6-abe0c1dd869e/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2022-11-21 09:13:22,189 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 83842 states and 153957 transitions. cyclomatic complexity: 70119. Second operand has 7 states, 7 states have (on average 31.142857142857142) internal successors, (218), 7 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 153241 states and 281116 transitions. Complement of second has 14 states. [2022-11-21 09:13:22,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 8 states 1 stem states 5 non-accepting loop states 1 accepting loop states [2022-11-21 09:13:22,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 31.142857142857142) internal successors, (218), 7 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:13:22,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 16451 transitions. [2022-11-21 09:13:22,210 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 16451 transitions. Stem has 170 letters. Loop has 48 letters. [2022-11-21 09:13:22,213 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-21 09:13:22,213 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 16451 transitions. Stem has 218 letters. Loop has 48 letters. [2022-11-21 09:13:22,214 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-21 09:13:22,214 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 16451 transitions. Stem has 170 letters. Loop has 96 letters. [2022-11-21 09:13:22,216 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-21 09:13:22,216 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 153241 states and 281116 transitions. [2022-11-21 09:13:23,033 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 41258 [2022-11-21 09:13:23,877 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 153241 states to 136669 states and 250701 transitions. [2022-11-21 09:13:23,877 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108800 [2022-11-21 09:13:23,979 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108819 [2022-11-21 09:13:23,979 INFO L73 IsDeterministic]: Start isDeterministic. Operand 136669 states and 250701 transitions. [2022-11-21 09:13:23,986 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-21 09:13:23,986 INFO L218 hiAutomatonCegarLoop]: Abstraction has 136669 states and 250701 transitions. [2022-11-21 09:13:24,073 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136669 states and 250701 transitions. [2022-11-21 09:13:25,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136669 to 133273. [2022-11-21 09:13:25,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133273 states, 133273 states have (on average 1.8380317093484801) internal successors, (244960), 133272 states have internal predecessors, (244960), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:13:26,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133273 states to 133273 states and 244960 transitions. [2022-11-21 09:13:26,206 INFO L240 hiAutomatonCegarLoop]: Abstraction has 133273 states and 244960 transitions. [2022-11-21 09:13:26,206 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 09:13:26,206 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-21 09:13:26,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-21 09:13:26,207 INFO L87 Difference]: Start difference. First operand 133273 states and 244960 transitions. Second operand has 4 states, 4 states have (on average 42.5) internal successors, (170), 4 states have internal predecessors, (170), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:13:28,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 09:13:28,824 INFO L93 Difference]: Finished difference Result 398897 states and 732972 transitions. [2022-11-21 09:13:28,825 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 398897 states and 732972 transitions. [2022-11-21 09:13:31,382 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 117999 [2022-11-21 09:13:32,959 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 398897 states to 398897 states and 732972 transitions. [2022-11-21 09:13:32,959 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 317750 [2022-11-21 09:13:33,213 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 317750 [2022-11-21 09:13:33,213 INFO L73 IsDeterministic]: Start isDeterministic. Operand 398897 states and 732972 transitions. [2022-11-21 09:13:33,259 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-21 09:13:33,260 INFO L218 hiAutomatonCegarLoop]: Abstraction has 398897 states and 732972 transitions. [2022-11-21 09:13:33,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398897 states and 732972 transitions. [2022-11-21 09:13:36,251 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398897 to 133357. [2022-11-21 09:13:36,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133357 states, 133357 states have (on average 1.8375038430678554) internal successors, (245044), 133356 states have internal predecessors, (245044), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 09:13:36,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133357 states to 133357 states and 245044 transitions. [2022-11-21 09:13:36,569 INFO L240 hiAutomatonCegarLoop]: Abstraction has 133357 states and 245044 transitions. [2022-11-21 09:13:36,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-21 09:13:36,570 INFO L428 stractBuchiCegarLoop]: Abstraction has 133357 states and 245044 transitions. [2022-11-21 09:13:36,570 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-21 09:13:36,570 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 133357 states and 245044 transitions. [2022-11-21 09:13:37,579 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 39333 [2022-11-21 09:13:37,594 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-21 09:13:37,594 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-21 09:13:37,616 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:13:37,617 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 09:13:37,617 INFO L748 eck$LassoCheckResult]: Stem: 1162859#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1161122#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1160081#L2470 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1160082#L2463 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1162809#L2478 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1157905#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1157906#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1157952#L2845 assume { :end_inline_initFloors } true; 1159232#L845 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1157672#L2373 assume !(0 == getOrigin_~person#1); 1157674#L2377 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1157660#L2398 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1163338#L3123 assume 0 == initPersonOnFloor_~floor#1; 1163089#L3124 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1155612#L3231-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1156779#L2915 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1156278#L2927-2 assume { :end_inline_callOnFloor } true; 1156279#L3267 assume { :end_inline_initPersonOnFloor } true; 1162192#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1157987#L1029 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1157988#L1081 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 1159921#L2507 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1157468#L2569 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1157469#L1046-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1155148#L1067-5 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 1157640#L2573 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1157998#L2613 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1163480#L2852 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1163481#L2879 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1181724#L2316 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1163465#L1698 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1163461#L1029-1 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1163459#L1702 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1163458#L1715 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 1163456#L1853 assume !(0 != timeShift_~tmp___9~2#1); 1163455#L1944 assume !(1 == ~doorState~0); 1163454#L1944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1163453#L2852-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1163417#L2879-3 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1163452#L2316-1 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 1163450#L1581 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1163451#L1029-2 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1184813#L1594 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1184810#L1952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 1184808#L1638 assume !(1 == ~currentHeading~0); 1184806#L1648 assume !(0 == ~currentFloorID~0); 1184804#L1648-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1184801#L1654-1 assume { :end_inline_continueInDirection } true; 1163187#L1961-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1184800#L2638 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1184798#L1081-1 __utac_acc__Specification3_spec__2_#t~ret133#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11#1 := __utac_acc__Specification3_spec__2_#t~ret133#1;havoc __utac_acc__Specification3_spec__2_#t~ret133#1; 1184799#L2642 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11#1); 1184794#L2650 assume !(1 == ~expectedDirection~0); 1184792#L2651 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1184791#L1976 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1184790#L1029-4 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1184789#L1081-3 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 1184788#L2507-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1163353#L2569-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1184787#L2579-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1193205#L2590-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1193206#L2601-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1193201#L2612-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1193202#L2613-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1193198#L2852-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1177667#L2879-25 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1193160#L2316-3 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1193161#L1698-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret65#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~19#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~19#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1196833#L2852-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1196829#L2879-27 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1; 1196825#L1671-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 1196823#L1683-3 stopRequestedAtCurrentFloor_#t~ret69#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1196822#L1715-1 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 1196820#L1853-2 assume !(0 != timeShift_~tmp___9~2#1); 1196819#L1944-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1196818#L1944-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1196817#L2852-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1177637#L2879-28 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1196816#L2316-4 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 1196814#L1581-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1196812#L1029-6 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1196804#L1594-2 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1196794#L1952-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 1193208#L1638-3 assume !(1 == ~currentHeading~0); 1167196#L1648-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1167192#L1648-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1163675#L1654-7 assume { :end_inline_continueInDirection } true; 1163676#L1961-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1183720#L2638-1 assume !(-1 == ~expectedDirection~0); 1183718#L2650-1 assume !(1 == ~expectedDirection~0); 1183715#L2651-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1183714#L1976-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1183713#L1029-8 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1183712#L1081-6 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 1183710#L2507-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 1183709#L2508-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1159741#L1046-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1156755#L1067-24 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 1156756#L2512-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 1183686#L2613-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1183685#L2852-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1166692#L2879-50 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1183684#L2316-6 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1183682#L1698-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1183683#L1029-9 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1185947#L1702-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1185948#L1715-2 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 1189795#L1853-4 assume !(0 != timeShift_~tmp___9~2#1); 1189796#L1944-6 assume !(1 == ~doorState~0); 1190238#L1944-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1190237#L2852-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1190236#L2879-53 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1190235#L2316-7 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 1190222#L1581-4 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1190043#L1029-10 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1190040#L1594-4 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1190039#L1952-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 1163365#L1638-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 1161117#L3426-11 continueInDirection_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~18#1 := continueInDirection_#t~ret63#1;havoc continueInDirection_#t~ret63#1; 1160760#L1642-18 assume !(0 != continueInDirection_~tmp~18#1); 1160761#L1648-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1181706#L1654-13 assume { :end_inline_continueInDirection } true; 1181704#L1961-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1181703#L2638-2 assume !(-1 == ~expectedDirection~0); 1181259#L2650-2 assume !(1 == ~expectedDirection~0); 1181250#L2651-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1181249#L1976-2 assume { :end_inline_timeShift } true; 1181246#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1163987#L2373-1 assume !(0 == getOrigin_~person#1); 1163989#L2377-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1163967#L2398-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1163964#L3123-1 assume 0 == initPersonOnFloor_~floor#1; 1163965#L3124-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1181212#L3231-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1163728#L2915-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1163720#L2927-5 assume { :end_inline_callOnFloor } true; 1163710#L3267-1 assume { :end_inline_initPersonOnFloor } true; 1163672#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1163664#L1029-12 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1163654#L1081-9 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 1163442#L2507-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 1162268#L2508-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1159602#L1046-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1155565#L1067-36 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 1162269#L2512-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 1181168#L2613-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1181167#L2852-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1165496#L2879-75 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1181166#L2316-9 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1181162#L1698-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1181163#L1029-13 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1181164#L1702-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1181165#L1715-3 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 1181247#L1853-6 assume !(0 != timeShift_~tmp___9~2#1); 1181121#L1944-9 assume 1 == ~doorState~0;~doorState~0 := 0; 1181119#L1944-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1181112#L2852-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1181103#L2879-78 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1181097#L2316-10 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 1181095#L1581-6 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1181096#L1029-14 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1181014#L1594-6 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1181015#L1952-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 1163342#L1638-9 assume !(1 == ~currentHeading~0); 1163343#L1648-27 assume !(0 == ~currentFloorID~0); 1157434#L1648-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1232643#L1654-19 assume { :end_inline_continueInDirection } true; 1241660#L1961-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1241659#L2638-3 assume !(-1 == ~expectedDirection~0); 1240704#L2650-3 assume !(1 == ~expectedDirection~0); 1240694#L2651-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1240687#L1976-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1240683#L198-2 assume !false; 1240684#L199 [2022-11-21 09:13:37,618 INFO L750 eck$LassoCheckResult]: Loop: 1240684#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1262609#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 1262608#L876 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1262607#L206 assume 1 != cleanup_~tmp___0~0#1; 1262606#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1262601#L2852-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1262599#L2879-100 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 1262569#L1137 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 1262560#L1201 isIdle_#t~ret48#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 1262559#L1214 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1262558#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1262557#L1029-16 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1262556#L1081-12 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 1262555#L2507-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1248697#L2569-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1262554#L2579-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1268985#L2590-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1268981#L2601-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1268979#L2612-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1268973#L2613-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1268966#L2852-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1265922#L2879-105 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1268962#L2316-12 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1268960#L1698-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret65#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~19#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~19#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1268952#L2852-107 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1268944#L2879-107 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret64#1; 1268938#L1671-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 1268933#L1683-9 stopRequestedAtCurrentFloor_#t~ret69#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1268930#L1715-4 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 1268923#L1853-8 assume !(0 != timeShift_~tmp___9~2#1); 1268920#L1944-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1268916#L1944-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1266437#L2852-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1265879#L2879-108 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1266408#L2316-13 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 1266406#L1581-8 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1266352#L1029-18 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1266346#L1594-8 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1266341#L1952-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 1266342#L1638-12 assume !(1 == ~currentHeading~0); 1266330#L1648-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1266331#L1648-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1262627#L1654-25 assume { :end_inline_continueInDirection } true; 1262624#L1961-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1262622#L2638-4 assume !(-1 == ~expectedDirection~0); 1262621#L2650-4 assume !(1 == ~expectedDirection~0); 1262613#L2651-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1262611#L1976-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1262610#L198-2 assume !false; 1240684#L199 [2022-11-21 09:13:37,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:13:37,619 INFO L85 PathProgramCache]: Analyzing trace with hash 1029761207, now seen corresponding path program 1 times [2022-11-21 09:13:37,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:13:37,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045437158] [2022-11-21 09:13:37,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:13:37,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:13:37,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:13:37,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:13:37,886 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:13:37,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2045437158] [2022-11-21 09:13:37,887 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2045437158] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:13:37,887 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:13:37,887 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 09:13:37,889 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1280660272] [2022-11-21 09:13:37,890 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:13:37,890 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-21 09:13:37,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 09:13:37,891 INFO L85 PathProgramCache]: Analyzing trace with hash -605580793, now seen corresponding path program 1 times [2022-11-21 09:13:37,891 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 09:13:37,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1301157693] [2022-11-21 09:13:37,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 09:13:37,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 09:13:37,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 09:13:37,998 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 09:13:37,998 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 09:13:37,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1301157693] [2022-11-21 09:13:37,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1301157693] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 09:13:37,999 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 09:13:37,999 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-21 09:13:37,999 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1529964633] [2022-11-21 09:13:37,999 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 09:13:38,000 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-21 09:13:38,000 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 09:13:38,001 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-21 09:13:38,001 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-21 09:13:38,001 INFO L87 Difference]: Start difference. First operand 133357 states and 245044 transitions. cyclomatic complexity: 111719 Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 8 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)