./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5f6e99961ac853f3709ebf596b9583b8c3fd14e8 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 11:16:13,884 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 11:16:13,886 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 11:16:13,894 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 11:16:13,894 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 11:16:13,895 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 11:16:13,895 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 11:16:13,897 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 11:16:13,898 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 11:16:13,898 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 11:16:13,899 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 11:16:13,899 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 11:16:13,899 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 11:16:13,900 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 11:16:13,902 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 11:16:13,902 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 11:16:13,903 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 11:16:13,904 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 11:16:13,906 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 11:16:13,907 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 11:16:13,907 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 11:16:13,908 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 11:16:13,910 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 11:16:13,910 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 11:16:13,911 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 11:16:13,911 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 11:16:13,912 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 11:16:13,912 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 11:16:13,913 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 11:16:13,914 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 11:16:13,914 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 11:16:13,914 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 11:16:13,914 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 11:16:13,914 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 11:16:13,916 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 11:16:13,917 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 11:16:13,917 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 11:16:13,931 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 11:16:13,935 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 11:16:13,936 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 11:16:13,937 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 11:16:13,937 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 11:16:13,937 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 11:16:13,937 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 11:16:13,937 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 11:16:13,937 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 11:16:13,937 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 11:16:13,938 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 11:16:13,938 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 11:16:13,938 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 11:16:13,938 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 11:16:13,938 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 11:16:13,938 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 11:16:13,938 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 11:16:13,938 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 11:16:13,939 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 11:16:13,939 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 11:16:13,939 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 11:16:13,939 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 11:16:13,939 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 11:16:13,939 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 11:16:13,939 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 11:16:13,940 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 11:16:13,940 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 11:16:13,940 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 11:16:13,940 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 11:16:13,944 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 11:16:13,944 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 11:16:13,945 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 11:16:13,946 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5f6e99961ac853f3709ebf596b9583b8c3fd14e8 [2018-11-18 11:16:13,979 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 11:16:13,989 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 11:16:13,993 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 11:16:13,994 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 11:16:13,994 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 11:16:13,995 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c [2018-11-18 11:16:14,040 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/data/f7955e355/3d6ee2656fa94791ac213c041ae03e0a/FLAG7766cf346 [2018-11-18 11:16:14,531 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 11:16:14,531 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/sv-benchmarks/c/product-lines/elevator_spec3_product01_true-unreach-call_true-termination.cil.c [2018-11-18 11:16:14,547 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/data/f7955e355/3d6ee2656fa94791ac213c041ae03e0a/FLAG7766cf346 [2018-11-18 11:16:14,558 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/data/f7955e355/3d6ee2656fa94791ac213c041ae03e0a [2018-11-18 11:16:14,561 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 11:16:14,562 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 11:16:14,563 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 11:16:14,563 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 11:16:14,566 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 11:16:14,567 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:16:14" (1/1) ... [2018-11-18 11:16:14,569 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@49fb43e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:14, skipping insertion in model container [2018-11-18 11:16:14,569 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:16:14" (1/1) ... [2018-11-18 11:16:14,577 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 11:16:14,642 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 11:16:15,057 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 11:16:15,066 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 11:16:15,230 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 11:16:15,266 INFO L195 MainTranslator]: Completed translation [2018-11-18 11:16:15,266 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15 WrapperNode [2018-11-18 11:16:15,266 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 11:16:15,267 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 11:16:15,267 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 11:16:15,267 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 11:16:15,274 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,291 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,454 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 11:16:15,454 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 11:16:15,455 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 11:16:15,455 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 11:16:15,467 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,467 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,501 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,501 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,560 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,618 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,646 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... [2018-11-18 11:16:15,681 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 11:16:15,681 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 11:16:15,682 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 11:16:15,682 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 11:16:15,682 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:16:15,743 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 11:16:15,744 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 11:16:15,744 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 11:16:26,579 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 11:16:26,580 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:16:26 BoogieIcfgContainer [2018-11-18 11:16:26,580 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 11:16:26,580 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 11:16:26,580 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 11:16:26,582 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 11:16:26,583 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 11:16:26,583 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 11:16:14" (1/3) ... [2018-11-18 11:16:26,584 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@61f32e8c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 11:16:26, skipping insertion in model container [2018-11-18 11:16:26,584 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 11:16:26,584 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:16:15" (2/3) ... [2018-11-18 11:16:26,584 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@61f32e8c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 11:16:26, skipping insertion in model container [2018-11-18 11:16:26,584 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 11:16:26,584 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:16:26" (3/3) ... [2018-11-18 11:16:26,586 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product01_true-unreach-call_true-termination.cil.c [2018-11-18 11:16:26,621 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 11:16:26,621 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 11:16:26,621 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 11:16:26,621 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 11:16:26,621 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 11:16:26,622 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 11:16:26,622 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 11:16:26,622 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 11:16:26,622 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 11:16:26,684 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5724 states. [2018-11-18 11:16:26,783 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1161 [2018-11-18 11:16:26,783 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:16:26,783 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:16:26,800 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:26,801 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:26,801 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 11:16:26,801 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5724 states. [2018-11-18 11:16:26,850 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1161 [2018-11-18 11:16:26,850 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:16:26,850 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:16:26,856 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:26,856 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:26,864 INFO L794 eck$LassoCheckResult]: Stem: 2855#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4316#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 5583#L1856true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4489#L1849true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4833#L1864true main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 3624#L385true assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 3990#L358true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 976#L692true assume { :end_inline_initFloors } true; 833#L1932true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3908#L444true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3679#L469true bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4147#L970true assume 0 == initPersonOnFloor_~floor; 4292#L971true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2758#L1078-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2303#L762true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 33#L774-2true assume { :end_inline_callOnFloor } true; 2314#L1114true assume { :end_inline_initPersonOnFloor } true; 4793#L103true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 462#L2092true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3761#L2144true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 65#L1305true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1392#L1367true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4608#L2109-5true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4902#L2130-5true __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1329#L1371true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 4082#L1411true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 826#L699true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2931#L726true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 680#L2705true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1174#L2717true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3421#L2854true assume !(0 != timeShift_~tmp___9~3); 3233#L2945true assume !(1 == ~doorState~0); 3235#L2945-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3968#L2296true assume !(1 == stopRequestedInDirection_~dir); 4345#L2465true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 608#L2618true timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1501#L2953true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3803#L2672true assume !(1 == ~currentHeading~0); 1975#L2682true assume !(0 == ~currentFloorID~0); 1953#L2682-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1407#L2688-1true assume { :end_inline_continueInDirection } true; 2332#L2962-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2610#L1436true assume !(-1 == ~expectedDirection~0); 3194#L1448true assume !(1 == ~expectedDirection~0); 1927#L1449true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 12#L2977true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 461#L2092-1true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3732#L2144-3true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 69#L1305-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1094#L1306-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4595#L2109-11true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4890#L2130-11true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1051#L1310-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4087#L1411-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4625#L699-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2843#L726-21true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 685#L2705-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1178#L2717-1true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3407#L2854-2true assume !(0 != timeShift_~tmp___9~3); 3219#L2945-3true assume !(1 == ~doorState~0); 3227#L2945-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3971#L2296-2true assume !(1 == stopRequestedInDirection_~dir); 4349#L2465-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 584#L2618-2true timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1506#L2953-2true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3785#L2672-3true assume !(1 == ~currentHeading~0); 1939#L2682-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1942#L2682-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1390#L2688-7true assume { :end_inline_continueInDirection } true; 2318#L2962-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2611#L1436-1true assume !(-1 == ~expectedDirection~0); 3197#L1448-1true assume !(1 == ~expectedDirection~0); 1933#L1449-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 15#L2977-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 463#L2092-2true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3739#L2144-6true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 70#L1305-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1099#L1306-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4571#L2109-22true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4871#L2130-22true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1054#L1310-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4090#L1411-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4575#L699-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2684#L726-42true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 683#L2705-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1176#L2717-2true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3410#L2854-4true assume !(0 != timeShift_~tmp___9~3); 3224#L2945-6true assume !(1 == ~doorState~0); 3205#L2945-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5587#L2296-4true assume !(1 == stopRequestedInDirection_~dir); 4325#L2465-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 587#L2618-4true timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1516#L2953-4true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3792#L2672-6true assume !(1 == ~currentHeading~0); 1891#L2682-18true assume !(0 == ~currentFloorID~0); 1895#L2682-20true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1533#L2688-13true assume { :end_inline_continueInDirection } true; 2323#L2962-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2612#L1436-2true assume !(-1 == ~expectedDirection~0); 3201#L1448-2true assume !(1 == ~expectedDirection~0); 1936#L1449-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 14#L2977-2true assume { :end_inline_timeShift } true; 800#L171true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3913#L444-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3678#L469-1true bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4128#L970-1true assume 0 == initPersonOnFloor_~floor; 4289#L971-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2937#L1078-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2293#L762-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 45#L774-5true assume { :end_inline_callOnFloor } true; 2304#L1114-1true assume { :end_inline_initPersonOnFloor } true; 4791#L103-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 450#L2092-3true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3713#L2144-9true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 74#L1305-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1103#L1306-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4548#L2109-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3020#L2130-33true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1037#L1310-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4093#L1411-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4770#L699-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2639#L726-63true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 663#L2705-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1180#L2717-3true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3417#L2854-6true assume !(0 != timeShift_~tmp___9~3); 3211#L2945-9true assume !(1 == ~doorState~0); 3213#L2945-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5589#L2296-6true assume !(1 == stopRequestedInDirection_~dir); 4327#L2465-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 428#L2618-6true timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1488#L2953-6true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3767#L2672-9true assume !(1 == ~currentHeading~0); 1877#L2682-27true assume !(0 == ~currentFloorID~0); 2064#L2682-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1524#L2688-19true assume { :end_inline_continueInDirection } true; 2267#L2962-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2608#L1436-3true assume !(-1 == ~expectedDirection~0); 3203#L1448-3true assume !(1 == ~expectedDirection~0); 1940#L1449-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 5#L2977-3true assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 5032#L188-3true [2018-11-18 11:16:26,877 INFO L796 eck$LassoCheckResult]: Loop: 5032#L188-3true assume true; 5009#L188-1true assume !false; 5175#L189true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 4940#L192true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2702#L1963true cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2813#L196true assume 1 != cleanup_~tmp___0~0; 2811#L196-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4685#L699-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2739#L726-84true anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 4390#L2200true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 537#L2264true isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1022#L2277true cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 3444#L208true assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 452#L2092-4true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3698#L2144-12true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 75#L1305-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1107#L1306-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4776#L2109-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2993#L2130-44true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1041#L1310-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4095#L1411-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4665#L699-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2733#L726-89true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 667#L2705-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1165#L2717-4true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3394#L2854-8true assume !(0 != timeShift_~tmp___9~3); 3215#L2945-12true assume !(1 == ~doorState~0); 3191#L2945-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5595#L2296-8true assume !(1 == stopRequestedInDirection_~dir); 4300#L2465-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 431#L2618-8true timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1497#L2953-8true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3747#L2672-12true assume !(1 == ~currentHeading~0); 2057#L2682-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2038#L2682-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1508#L2688-25true assume { :end_inline_continueInDirection } true; 2255#L2962-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2609#L1436-4true assume !(-1 == ~expectedDirection~0); 3183#L1448-4true assume !(1 == ~expectedDirection~0); 1944#L1449-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 7#L2977-4true assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 5032#L188-3true [2018-11-18 11:16:26,881 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:26,889 INFO L82 PathProgramCache]: Analyzing trace with hash 510686431, now seen corresponding path program 1 times [2018-11-18 11:16:26,891 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:26,891 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:26,939 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:26,939 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:26,939 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:27,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:27,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:27,895 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:27,896 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:16:27,900 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:16:27,901 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:27,901 INFO L82 PathProgramCache]: Analyzing trace with hash -157137175, now seen corresponding path program 1 times [2018-11-18 11:16:27,901 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:27,901 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:27,902 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:27,902 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:27,902 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:27,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:28,052 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:28,053 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:28,053 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 11:16:28,054 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:16:28,070 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 11:16:28,070 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 11:16:28,072 INFO L87 Difference]: Start difference. First operand 5724 states. Second operand 6 states. [2018-11-18 11:16:39,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:16:39,398 INFO L93 Difference]: Finished difference Result 14350 states and 26705 transitions. [2018-11-18 11:16:39,398 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-18 11:16:39,400 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14350 states and 26705 transitions. [2018-11-18 11:16:39,502 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3311 [2018-11-18 11:16:39,568 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14350 states to 14262 states and 26606 transitions. [2018-11-18 11:16:39,569 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14262 [2018-11-18 11:16:39,584 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14262 [2018-11-18 11:16:39,585 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14262 states and 26606 transitions. [2018-11-18 11:16:39,612 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:16:39,612 INFO L705 BuchiCegarLoop]: Abstraction has 14262 states and 26606 transitions. [2018-11-18 11:16:39,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14262 states and 26606 transitions. [2018-11-18 11:16:39,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14262 to 9460. [2018-11-18 11:16:39,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9460 states. [2018-11-18 11:16:39,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9460 states to 9460 states and 17669 transitions. [2018-11-18 11:16:39,870 INFO L728 BuchiCegarLoop]: Abstraction has 9460 states and 17669 transitions. [2018-11-18 11:16:39,872 INFO L608 BuchiCegarLoop]: Abstraction has 9460 states and 17669 transitions. [2018-11-18 11:16:39,872 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 11:16:39,872 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9460 states and 17669 transitions. [2018-11-18 11:16:39,902 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2120 [2018-11-18 11:16:39,903 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:16:39,903 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:16:39,907 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:39,911 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:39,912 INFO L794 eck$LassoCheckResult]: Stem: 23668#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 23669#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 25261#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 25387#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 25388#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 24362#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 24363#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 21611#L692 assume { :end_inline_initFloors } true; 21466#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 21467#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 23310#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 24384#L970 assume 0 == initPersonOnFloor_~floor; 25040#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20404#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23084#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 20189#L774-2 assume { :end_inline_callOnFloor } true; 20190#L1114 assume { :end_inline_initPersonOnFloor } true; 23104#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20975#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20976#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 20266#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 20267#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 22049#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 25131#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 21954#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 20321#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 21457#L699 assume !(0 == isFloorCalling_~floorID); 21458#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23742#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 21243#L2705 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 20214#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21729#L2854 assume !(0 != timeShift_~tmp___9~3); 24033#L2945 assume !(1 == ~doorState~0); 24034#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24036#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 22687#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 22688#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 20453#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 21153#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 22243#L2672 assume !(1 == ~currentHeading~0); 22749#L2682 assume !(0 == ~currentFloorID~0); 22733#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22067#L2688-1 assume { :end_inline_continueInDirection } true; 22061#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 23124#L1436 assume !(-1 == ~expectedDirection~0); 23274#L1448 assume !(1 == ~expectedDirection~0); 22544#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 20130#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20131#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20974#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 20278#L1305-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 20279#L1306-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 21389#L1316-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21390#L2109-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 24698#L2130-12 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 25354#L1321-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 23673#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24985#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23656#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 21252#L2705-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 20204#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21731#L2854-2 assume !(0 != timeShift_~tmp___9~3); 24022#L2945-3 assume !(1 == ~doorState~0); 24023#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24028#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 24795#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 29341#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 29391#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 29392#L2672-3 assume !(1 == ~currentHeading~0); 29564#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22723#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22047#L2688-7 assume { :end_inline_continueInDirection } true; 21985#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 23107#L1436-1 assume !(-1 == ~expectedDirection~0); 23276#L1448-1 assume !(1 == ~expectedDirection~0); 22560#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 20137#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20138#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20977#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 20281#L1305-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 20282#L1306-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 21396#L1316-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21398#L2109-23 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 24608#L2130-23 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 25360#L1321-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 23683#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24987#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23399#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 21248#L2705-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 20216#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21730#L2854-4 assume !(0 != timeShift_~tmp___9~3); 24027#L2945-6 assume !(1 == ~doorState~0); 24010#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24011#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 26035#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 29427#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 29425#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 29426#L2672-6 assume !(1 == ~currentHeading~0); 29563#L2682-18 assume !(0 == ~currentFloorID~0); 22670#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 22290#L2688-13 assume { :end_inline_continueInDirection } true; 21972#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 23114#L1436-2 assume !(-1 == ~expectedDirection~0); 23278#L1448-2 assume !(1 == ~expectedDirection~0); 22519#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 20135#L2977-2 assume { :end_inline_timeShift } true; 20136#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 21420#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 23315#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 24383#L970-1 assume 0 == initPersonOnFloor_~floor; 25020#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20378#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23065#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 20200#L774-5 assume { :end_inline_callOnFloor } true; 20217#L1114-1 assume { :end_inline_initPersonOnFloor } true; 23085#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20967#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20968#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 20293#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 20294#L1306-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 21401#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21402#L2109-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 23848#L2130-34 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 23849#L1321-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 23642#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24989#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23325#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 21216#L2705-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 20233#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21732#L2854-6 assume !(0 != timeShift_~tmp___9~3); 24014#L2945-9 assume !(1 == ~doorState~0); 24015#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24017#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 26036#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 20941#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 20942#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 22217#L2672-9 assume !(1 == ~currentHeading~0); 29559#L2682-27 assume !(0 == ~currentFloorID~0); 22652#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22277#L2688-19 assume { :end_inline_continueInDirection } true; 21978#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 23027#L1436-3 assume !(-1 == ~expectedDirection~0); 23270#L1448-3 assume !(1 == ~expectedDirection~0); 22477#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 20112#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 20113#L188-3 [2018-11-18 11:16:39,912 INFO L796 eck$LassoCheckResult]: Loop: 20113#L188-3 assume true; 25688#L188-1 assume !false; 25689#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 25619#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 23430#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 23431#L196 assume 1 != cleanup_~tmp___0~0; 23607#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 23608#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23485#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 23486#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 21054#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 21055#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 21651#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20969#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20970#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 20296#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 20297#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 22294#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 20474#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 20476#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 21540#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23654#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24991#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23474#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 21223#L2705-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 20173#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21728#L2854-8 assume !(0 != timeShift_~tmp___9~3); 24019#L2945-12 assume !(1 == ~doorState~0); 24000#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24001#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 26040#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 29430#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 29493#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 29494#L2672-12 assume !(1 == ~currentHeading~0); 29565#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22803#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 22252#L2688-25 assume { :end_inline_continueInDirection } true; 21963#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 23015#L1436-4 assume !(-1 == ~expectedDirection~0); 23272#L1448-4 assume !(1 == ~expectedDirection~0); 22499#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 20117#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 20113#L188-3 [2018-11-18 11:16:39,921 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:39,921 INFO L82 PathProgramCache]: Analyzing trace with hash 1915755291, now seen corresponding path program 1 times [2018-11-18 11:16:39,921 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:39,921 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:39,922 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:39,922 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:39,922 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:39,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:41,073 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:41,073 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:41,073 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:16:41,073 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:16:41,074 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:41,074 INFO L82 PathProgramCache]: Analyzing trace with hash -770700160, now seen corresponding path program 1 times [2018-11-18 11:16:41,074 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:41,074 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:41,075 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:41,075 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:41,075 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:41,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:41,220 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:41,220 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:41,220 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-18 11:16:41,221 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:16:41,221 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-18 11:16:41,221 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-18 11:16:41,221 INFO L87 Difference]: Start difference. First operand 9460 states and 17669 transitions. cyclomatic complexity: 8210 Second operand 9 states. [2018-11-18 11:16:51,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:16:51,357 INFO L93 Difference]: Finished difference Result 33910 states and 63257 transitions. [2018-11-18 11:16:51,358 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-11-18 11:16:51,358 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33910 states and 63257 transitions. [2018-11-18 11:16:51,478 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8255 [2018-11-18 11:16:51,589 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33910 states to 33910 states and 63257 transitions. [2018-11-18 11:16:51,589 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33910 [2018-11-18 11:16:51,609 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33910 [2018-11-18 11:16:51,609 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33910 states and 63257 transitions. [2018-11-18 11:16:51,635 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:16:51,635 INFO L705 BuchiCegarLoop]: Abstraction has 33910 states and 63257 transitions. [2018-11-18 11:16:51,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33910 states and 63257 transitions. [2018-11-18 11:16:51,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33910 to 12894. [2018-11-18 11:16:51,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12894 states. [2018-11-18 11:16:51,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12894 states to 12894 states and 23948 transitions. [2018-11-18 11:16:51,896 INFO L728 BuchiCegarLoop]: Abstraction has 12894 states and 23948 transitions. [2018-11-18 11:16:51,897 INFO L608 BuchiCegarLoop]: Abstraction has 12894 states and 23948 transitions. [2018-11-18 11:16:51,897 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 11:16:51,897 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12894 states and 23948 transitions. [2018-11-18 11:16:51,931 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3030 [2018-11-18 11:16:51,932 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:16:51,932 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:16:51,935 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:51,935 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:51,936 INFO L794 eck$LassoCheckResult]: Stem: 67063#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 67064#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 68596#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 68724#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 68725#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 67739#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 67740#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 65056#L692 assume { :end_inline_initFloors } true; 64910#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 64911#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 66733#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 67761#L970 assume 0 == initPersonOnFloor_~floor; 68383#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 63854#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 66510#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 63635#L774-2 assume { :end_inline_callOnFloor } true; 63636#L1114 assume { :end_inline_initPersonOnFloor } true; 66530#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 64423#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 64424#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 63716#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 63717#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 65488#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 68469#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 65392#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 63771#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 64901#L699 assume !(0 == isFloorCalling_~floorID); 64902#L703 assume !(1 == isFloorCalling_~floorID); 68550#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 67134#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 64687#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 64688#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 68112#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 63660#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 63662#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 69326#L2854 assume !(0 != timeShift_~tmp___9~3); 67425#L2945 assume !(1 == ~doorState~0); 67426#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 67428#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 66120#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 66121#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 63903#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 64599#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 65680#L2672 assume !(1 == ~currentHeading~0); 66182#L2682 assume !(0 == ~currentFloorID~0); 66166#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 65506#L2688-1 assume { :end_inline_continueInDirection } true; 65500#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 66549#L1436 assume !(-1 == ~expectedDirection~0); 69462#L1448 assume !(1 == ~expectedDirection~0); 69460#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 69459#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 69458#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 69457#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 69455#L1305-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 69454#L1306-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 69453#L1316-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 69435#L2109-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 69427#L2130-12 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 69419#L1321-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 69417#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 69414#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 69415#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 72506#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 72507#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 72508#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 72505#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 72503#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 72500#L2854-2 assume !(0 != timeShift_~tmp___9~3); 72501#L2945-3 assume !(1 == ~doorState~0); 76107#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 76100#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 76084#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 76079#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 76077#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 76076#L2672-3 assume !(1 == ~currentHeading~0); 76075#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 66156#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 65485#L2688-7 assume { :end_inline_continueInDirection } true; 65486#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 69650#L1436-1 assume !(-1 == ~expectedDirection~0); 69628#L1448-1 assume !(1 == ~expectedDirection~0); 69622#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 69619#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 69616#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 69613#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 69609#L1305-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 69610#L1306-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 69409#L1316-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 69404#L2109-23 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 69385#L2130-23 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 69379#L1321-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 69372#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 69369#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 69370#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 72867#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 72868#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 72870#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 72869#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 72866#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 72863#L2854-4 assume !(0 != timeShift_~tmp___9~3); 72864#L2945-6 assume !(1 == ~doorState~0); 76418#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 76407#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 76401#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 76384#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 76382#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 76383#L2672-6 assume !(1 == ~currentHeading~0); 76444#L2682-18 assume !(0 == ~currentFloorID~0); 66103#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 65728#L2688-13 assume { :end_inline_continueInDirection } true; 65729#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 69919#L1436-2 assume !(-1 == ~expectedDirection~0); 69917#L1448-2 assume !(1 == ~expectedDirection~0); 69915#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 69914#L2977-2 assume { :end_inline_timeShift } true; 69913#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 69912#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 69906#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 69905#L970-1 assume 0 == initPersonOnFloor_~floor; 69700#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 69554#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 69555#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 69546#L774-5 assume { :end_inline_callOnFloor } true; 69547#L1114-1 assume { :end_inline_initPersonOnFloor } true; 69542#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 69543#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 69532#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 69533#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 69606#L1306-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 69366#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 69363#L2109-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 69344#L2130-34 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 69338#L1321-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 69331#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 69327#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 69328#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 74065#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 74066#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 74068#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 74067#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 74064#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 74061#L2854-6 assume !(0 != timeShift_~tmp___9~3); 74062#L2945-9 assume !(1 == ~doorState~0); 74464#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 74454#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 74449#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 74430#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 74428#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 74427#L2672-9 assume !(1 == ~currentHeading~0); 74426#L2682-27 assume !(0 == ~currentFloorID~0); 66085#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 65715#L2688-19 assume { :end_inline_continueInDirection } true; 65685#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 72620#L1436-3 assume !(-1 == ~expectedDirection~0); 72614#L1448-3 assume !(1 == ~expectedDirection~0); 72609#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 72607#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 72605#L188-3 [2018-11-18 11:16:51,936 INFO L796 eck$LassoCheckResult]: Loop: 72605#L188-3 assume true; 72604#L188-1 assume !false; 72603#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 72602#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 72597#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 72595#L196 assume 1 != cleanup_~tmp___0~0; 72592#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 72583#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 72574#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 72563#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 72558#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 72557#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 72556#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 72555#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 72554#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 72553#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 65159#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 64855#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 64856#L2109-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 67203#L2130-45 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 67204#L1321-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 68676#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 69411#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 69412#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73888#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73889#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 73890#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 73887#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 73885#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 73882#L2854-8 assume !(0 != timeShift_~tmp___9~3); 73883#L2945-12 assume !(1 == ~doorState~0); 76289#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 76280#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 76269#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 76257#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 76255#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 76256#L2672-12 assume !(1 == ~currentHeading~0); 76441#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 66236#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 65690#L2688-25 assume { :end_inline_continueInDirection } true; 65655#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 72617#L1436-4 assume !(-1 == ~expectedDirection~0); 72611#L1448-4 assume !(1 == ~expectedDirection~0); 72608#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 72606#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 72605#L188-3 [2018-11-18 11:16:51,952 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:51,952 INFO L82 PathProgramCache]: Analyzing trace with hash 279708018, now seen corresponding path program 1 times [2018-11-18 11:16:51,952 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:51,953 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:51,953 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:51,953 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:51,953 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:51,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:52,837 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:52,838 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:52,838 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:16:52,840 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:16:52,840 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:52,840 INFO L82 PathProgramCache]: Analyzing trace with hash 1756278487, now seen corresponding path program 1 times [2018-11-18 11:16:52,840 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:52,840 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:52,841 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:52,841 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:52,841 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:52,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:52,901 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:52,901 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:52,902 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:16:52,902 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:16:52,902 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:16:52,902 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:16:52,902 INFO L87 Difference]: Start difference. First operand 12894 states and 23948 transitions. cyclomatic complexity: 11055 Second operand 3 states. [2018-11-18 11:16:54,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:16:54,170 INFO L93 Difference]: Finished difference Result 25174 states and 46670 transitions. [2018-11-18 11:16:54,170 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:16:54,170 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25174 states and 46670 transitions. [2018-11-18 11:16:54,241 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5939 [2018-11-18 11:16:54,316 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25174 states to 25174 states and 46670 transitions. [2018-11-18 11:16:54,316 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25174 [2018-11-18 11:16:54,336 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25174 [2018-11-18 11:16:54,336 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25174 states and 46670 transitions. [2018-11-18 11:16:54,354 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:16:54,355 INFO L705 BuchiCegarLoop]: Abstraction has 25174 states and 46670 transitions. [2018-11-18 11:16:54,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25174 states and 46670 transitions. [2018-11-18 11:16:54,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25174 to 12852. [2018-11-18 11:16:54,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12852 states. [2018-11-18 11:16:54,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12852 states to 12852 states and 23836 transitions. [2018-11-18 11:16:54,561 INFO L728 BuchiCegarLoop]: Abstraction has 12852 states and 23836 transitions. [2018-11-18 11:16:54,561 INFO L608 BuchiCegarLoop]: Abstraction has 12852 states and 23836 transitions. [2018-11-18 11:16:54,562 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 11:16:54,562 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12852 states and 23836 transitions. [2018-11-18 11:16:54,597 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3021 [2018-11-18 11:16:54,597 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:16:54,597 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:16:54,601 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:54,602 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:16:54,603 INFO L794 eck$LassoCheckResult]: Stem: 105180#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 105181#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 106743#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 106881#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 106882#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 105878#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 105879#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 103143#L692 assume { :end_inline_initFloors } true; 102999#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 103000#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 104848#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 105900#L970 assume 0 == initPersonOnFloor_~floor; 106531#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 101931#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 104625#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 101711#L774-2 assume { :end_inline_callOnFloor } true; 101712#L1114 assume { :end_inline_initPersonOnFloor } true; 104645#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 102504#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 102505#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 101793#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 101794#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 103580#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 106616#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 103484#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 101848#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 102990#L699 assume !(0 == isFloorCalling_~floorID); 102991#L703 assume !(1 == isFloorCalling_~floorID); 106697#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 105252#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 102775#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 102776#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 106257#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 101736#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 101738#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 107664#L2854 assume !(0 != timeShift_~tmp___9~3); 105551#L2945 assume !(1 == ~doorState~0); 105552#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 105554#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 104227#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 104228#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 101980#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 102683#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 103774#L2672 assume !(1 == ~currentHeading~0); 104291#L2682 assume !(0 == ~currentFloorID~0); 104275#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103598#L2688-1 assume { :end_inline_continueInDirection } true; 103592#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 108029#L1436 assume !(-1 == ~expectedDirection~0); 108024#L1448 assume !(1 == ~expectedDirection~0); 108021#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 108017#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 108014#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 108011#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 108004#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 108005#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 108009#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 108003#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 107986#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 107971#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 107968#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 107963#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 107955#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 107948#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 107946#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 107942#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 107939#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 107937#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 107934#L2854-2 assume !(0 != timeShift_~tmp___9~3); 107930#L2945-3 assume !(1 == ~doorState~0); 107928#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 107927#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 107885#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 107880#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 107877#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 107832#L2672-3 assume !(1 == ~currentHeading~0); 107829#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 104264#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103577#L2688-7 assume { :end_inline_continueInDirection } true; 103578#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 109914#L1436-1 assume !(-1 == ~expectedDirection~0); 105522#L1448-1 assume !(1 == ~expectedDirection~0); 104096#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 104258#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 109904#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 109903#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 109901#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 109888#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 107841#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 107812#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 107810#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 107807#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 107801#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 107798#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 107795#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 107767#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 107764#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 107760#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 107758#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 107757#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 107755#L2854-4 assume !(0 != timeShift_~tmp___9~3); 107753#L2945-6 assume !(1 == ~doorState~0); 107752#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 107751#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 107743#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 107726#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 107724#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 107725#L2672-6 assume !(1 == ~currentHeading~0); 107825#L2682-18 assume !(0 == ~currentFloorID~0); 104210#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 103822#L2688-13 assume { :end_inline_continueInDirection } true; 103823#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 112074#L1436-2 assume !(-1 == ~expectedDirection~0); 112072#L1448-2 assume !(1 == ~expectedDirection~0); 112070#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 112069#L2977-2 assume { :end_inline_timeShift } true; 112068#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 112067#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 112061#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 112059#L970-1 assume 0 == initPersonOnFloor_~floor; 108208#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 108190#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 108191#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 108162#L774-5 assume { :end_inline_callOnFloor } true; 108157#L1114-1 assume { :end_inline_initPersonOnFloor } true; 108158#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 108147#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 108148#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 108139#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 108140#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 108062#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 108061#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 108044#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 108039#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 108027#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 107857#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 107662#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 107659#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 107656#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 107646#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 107640#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 107636#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 107633#L2854-6 assume !(0 != timeShift_~tmp___9~3); 107626#L2945-9 assume !(1 == ~doorState~0); 107611#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 107600#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 107558#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 107539#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 107536#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 107534#L2672-9 assume !(1 == ~currentHeading~0); 107530#L2682-27 assume !(0 == ~currentFloorID~0); 104192#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103809#L2688-19 assume { :end_inline_continueInDirection } true; 103779#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 112548#L1436-3 assume !(-1 == ~expectedDirection~0); 112545#L1448-3 assume !(1 == ~expectedDirection~0); 112543#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 112542#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 112540#L188-3 [2018-11-18 11:16:54,603 INFO L796 eck$LassoCheckResult]: Loop: 112540#L188-3 assume true; 112539#L188-1 assume !false; 112538#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 112537#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 112536#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 112535#L196 assume 1 != cleanup_~tmp___0~0; 112534#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 112533#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 108239#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 108240#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 108164#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 108165#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 108155#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 108156#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 108145#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 108146#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 108135#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 108134#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 108123#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 108115#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 108108#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 108105#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 108103#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 108099#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 108098#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 108097#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 108092#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 108090#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 108089#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 108083#L2854-8 assume !(0 != timeShift_~tmp___9~3); 105537#L2945-12 assume !(1 == ~doorState~0); 105517#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 105518#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 108064#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 102473#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 102474#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 103766#L2672-12 assume !(1 == ~currentHeading~0); 105955#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 104345#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 103784#L2688-25 assume { :end_inline_continueInDirection } true; 103749#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 112555#L1436-4 assume !(-1 == ~expectedDirection~0); 112552#L1448-4 assume !(1 == ~expectedDirection~0); 112550#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 112541#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 112540#L188-3 [2018-11-18 11:16:54,616 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:54,616 INFO L82 PathProgramCache]: Analyzing trace with hash 998577738, now seen corresponding path program 1 times [2018-11-18 11:16:54,616 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:54,617 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:54,626 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:54,626 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:54,626 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:54,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:55,557 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:55,557 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:55,557 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:16:55,558 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:16:55,558 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:16:55,558 INFO L82 PathProgramCache]: Analyzing trace with hash -1178294497, now seen corresponding path program 1 times [2018-11-18 11:16:55,558 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:16:55,558 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:16:55,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:55,559 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:16:55,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:16:55,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:16:55,876 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:16:55,876 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:16:55,876 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 11:16:55,876 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:16:55,876 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 11:16:55,877 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-18 11:16:55,877 INFO L87 Difference]: Start difference. First operand 12852 states and 23836 transitions. cyclomatic complexity: 10985 Second operand 7 states. [2018-11-18 11:17:09,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:09,302 INFO L93 Difference]: Finished difference Result 75067 states and 140010 transitions. [2018-11-18 11:17:09,302 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-11-18 11:17:09,302 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 75067 states and 140010 transitions. [2018-11-18 11:17:09,486 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27930 [2018-11-18 11:17:09,664 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 75067 states to 75067 states and 140010 transitions. [2018-11-18 11:17:09,664 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 75067 [2018-11-18 11:17:09,705 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 75067 [2018-11-18 11:17:09,705 INFO L73 IsDeterministic]: Start isDeterministic. Operand 75067 states and 140010 transitions. [2018-11-18 11:17:09,756 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:09,756 INFO L705 BuchiCegarLoop]: Abstraction has 75067 states and 140010 transitions. [2018-11-18 11:17:09,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75067 states and 140010 transitions. [2018-11-18 11:17:10,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75067 to 25671. [2018-11-18 11:17:10,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25671 states. [2018-11-18 11:17:10,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25671 states to 25671 states and 47597 transitions. [2018-11-18 11:17:10,465 INFO L728 BuchiCegarLoop]: Abstraction has 25671 states and 47597 transitions. [2018-11-18 11:17:10,465 INFO L608 BuchiCegarLoop]: Abstraction has 25671 states and 47597 transitions. [2018-11-18 11:17:10,465 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 11:17:10,466 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25671 states and 47597 transitions. [2018-11-18 11:17:10,506 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6060 [2018-11-18 11:17:10,506 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:10,506 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:10,508 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:10,509 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:10,509 INFO L794 eck$LassoCheckResult]: Stem: 193322#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 193323#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 195151#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 195339#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 195340#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 194128#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 194129#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 191144#L692 assume { :end_inline_initFloors } true; 190993#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 190994#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 192945#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 194155#L970 assume 0 == initPersonOnFloor_~floor; 194901#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 189902#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 192703#L762 assume !(0 == callOnFloor_~floorID); 192572#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 189690#L774-2 assume { :end_inline_callOnFloor } true; 189691#L1114 assume { :end_inline_initPersonOnFloor } true; 192726#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 190477#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 190478#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 189764#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 189765#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 191606#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 194996#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 195634#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 194817#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 194818#L699 assume !(0 == isFloorCalling_~floorID); 195212#L703 assume !(1 == isFloorCalling_~floorID); 195213#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 193414#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 193415#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 195425#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 194574#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 189707#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 189709#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 196144#L2854 assume !(0 != timeShift_~tmp___9~3); 193743#L2945 assume !(1 == ~doorState~0); 193744#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 193746#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 192281#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 192282#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196733#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 196731#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 196730#L2672 assume !(1 == ~currentHeading~0); 196727#L2682 assume !(0 == ~currentFloorID~0); 196726#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 196725#L2688-1 assume { :end_inline_continueInDirection } true; 196723#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 196721#L1436 assume !(-1 == ~expectedDirection~0); 196718#L1448 assume !(1 == ~expectedDirection~0); 196716#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 196715#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 196714#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 196713#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 196712#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 196706#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 196699#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 196669#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 196655#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 196644#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 196641#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 196639#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 196634#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 196632#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 196625#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 196620#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 196616#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 196611#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 196606#L2854-2 assume !(0 != timeShift_~tmp___9~3); 193732#L2945-3 assume !(1 == ~doorState~0); 193733#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 193738#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 194619#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196542#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 196539#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 196540#L2672-3 assume !(1 == ~currentHeading~0); 196985#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 192323#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 192326#L2688-7 assume { :end_inline_continueInDirection } true; 197667#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 197664#L1436-1 assume !(-1 == ~expectedDirection~0); 197658#L1448-1 assume !(1 == ~expectedDirection~0); 197653#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 197651#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 197649#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 197647#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 197644#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 197641#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 197098#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 197096#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 197055#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 197043#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 196977#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 196974#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 196635#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 196633#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 196629#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 196621#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 196617#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 196612#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 196607#L2854-4 assume !(0 != timeShift_~tmp___9~3); 193736#L2945-6 assume !(1 == ~doorState~0); 193737#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 196459#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 196420#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196404#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 196402#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 196403#L2672-6 assume !(1 == ~currentHeading~0); 196984#L2682-18 assume !(0 == ~currentFloorID~0); 192266#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 192267#L2688-13 assume { :end_inline_continueInDirection } true; 197293#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 197290#L1436-2 assume !(-1 == ~expectedDirection~0); 197288#L1448-2 assume !(1 == ~expectedDirection~0); 197286#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 197285#L2977-2 assume { :end_inline_timeShift } true; 197284#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 197283#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 197277#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 197276#L970-1 assume 0 == initPersonOnFloor_~floor; 197258#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 197241#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 197239#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 197240#L774-5 assume { :end_inline_callOnFloor } true; 199424#L1114-1 assume { :end_inline_initPersonOnFloor } true; 197638#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 197616#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 197610#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 197601#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 197227#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 197208#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 197204#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 197191#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 196253#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 196254#L699-63 assume !(0 == isFloorCalling_~floorID); 196250#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 194271#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 196245#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 196246#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 193481#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 193482#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 197112#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 197113#L2854-6 assume !(0 != timeShift_~tmp___9~3); 205572#L2945-9 assume !(1 == ~doorState~0); 193724#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 193725#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 205546#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 195936#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 189945#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 190442#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 191780#L2672-9 assume !(1 == ~currentHeading~0); 194243#L2682-27 assume !(0 == ~currentFloorID~0); 205349#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 191841#L2688-19 assume { :end_inline_continueInDirection } true; 191808#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 206439#L1436-3 assume !(-1 == ~expectedDirection~0); 206436#L1448-3 assume !(1 == ~expectedDirection~0); 206434#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 206433#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 206431#L188-3 [2018-11-18 11:17:10,509 INFO L796 eck$LassoCheckResult]: Loop: 206431#L188-3 assume true; 206429#L188-1 assume !false; 206427#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 206425#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 206423#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 206419#L196 assume 1 != cleanup_~tmp___0~0; 206418#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 206412#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 206401#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 206380#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 205312#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 206375#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 206374#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 206373#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 206372#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 206370#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 206368#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 206369#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 207483#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 206771#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 205208#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 205209#L699-89 assume !(0 == isFloorCalling_~floorID); 205196#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 194712#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 205131#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 205133#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 206754#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 206755#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 206748#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 206749#L2854-8 assume !(0 != timeShift_~tmp___9~3); 193728#L2945-12 assume !(1 == ~doorState~0); 193700#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 193701#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 192462#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 192463#L2300-8 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 206558#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 206606#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 206605#L2672-12 assume !(1 == ~currentHeading~0); 206604#L2682-36 assume !(0 == ~currentFloorID~0); 192416#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 192417#L2688-25 assume { :end_inline_continueInDirection } true; 206491#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 206489#L1436-4 assume !(-1 == ~expectedDirection~0); 206486#L1448-4 assume !(1 == ~expectedDirection~0); 206466#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 206432#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 206431#L188-3 [2018-11-18 11:17:10,515 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:10,515 INFO L82 PathProgramCache]: Analyzing trace with hash 554886073, now seen corresponding path program 1 times [2018-11-18 11:17:10,516 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:10,516 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:10,516 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:10,516 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:10,516 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:10,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:11,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:11,306 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:11,306 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:11,307 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:11,307 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:11,307 INFO L82 PathProgramCache]: Analyzing trace with hash -1802518591, now seen corresponding path program 1 times [2018-11-18 11:17:11,307 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:11,307 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:11,308 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:11,308 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:11,308 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:11,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:11,340 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:11,340 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:11,340 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:17:11,340 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:11,340 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:17:11,340 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:17:11,341 INFO L87 Difference]: Start difference. First operand 25671 states and 47597 transitions. cyclomatic complexity: 21927 Second operand 5 states. [2018-11-18 11:17:17,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:17,757 INFO L93 Difference]: Finished difference Result 61000 states and 113284 transitions. [2018-11-18 11:17:17,757 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 11:17:17,757 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 61000 states and 113284 transitions. [2018-11-18 11:17:17,888 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15659 [2018-11-18 11:17:17,986 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 61000 states to 61000 states and 113284 transitions. [2018-11-18 11:17:17,987 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61000 [2018-11-18 11:17:18,013 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61000 [2018-11-18 11:17:18,013 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61000 states and 113284 transitions. [2018-11-18 11:17:18,036 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:18,036 INFO L705 BuchiCegarLoop]: Abstraction has 61000 states and 113284 transitions. [2018-11-18 11:17:18,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61000 states and 113284 transitions. [2018-11-18 11:17:18,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61000 to 25099. [2018-11-18 11:17:18,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25099 states. [2018-11-18 11:17:18,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25099 states to 25099 states and 46463 transitions. [2018-11-18 11:17:18,294 INFO L728 BuchiCegarLoop]: Abstraction has 25099 states and 46463 transitions. [2018-11-18 11:17:18,294 INFO L608 BuchiCegarLoop]: Abstraction has 25099 states and 46463 transitions. [2018-11-18 11:17:18,294 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 11:17:18,294 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25099 states and 46463 transitions. [2018-11-18 11:17:18,335 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5917 [2018-11-18 11:17:18,336 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:18,336 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:18,338 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:18,338 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:18,338 INFO L794 eck$LassoCheckResult]: Stem: 279888#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 279889#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 281553#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 281712#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 281713#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 280638#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 280639#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 277812#L692 assume { :end_inline_initFloors } true; 277666#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 277667#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 279554#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 280663#L970 assume 0 == initPersonOnFloor_~floor; 281330#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 276595#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 279316#L762 assume !(0 == callOnFloor_~floorID); 279186#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 276445#L774-2 assume { :end_inline_callOnFloor } true; 279338#L1114 assume { :end_inline_initPersonOnFloor } true; 279339#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 277165#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 277166#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 276457#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 276458#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 278257#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 281414#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 282648#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 281264#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 281265#L699 assume !(0 == isFloorCalling_~floorID); 281612#L703 assume !(1 == isFloorCalling_~floorID); 281613#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 279977#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 279978#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 282606#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 282591#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 282590#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 282588#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 282587#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 282585#L2854 assume !(0 != timeShift_~tmp___9~3); 282584#L2945 assume !(1 == ~doorState~0); 282583#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 282582#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 282581#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 282246#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 276644#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 277350#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 278450#L2672 assume !(1 == ~currentHeading~0); 278974#L2682 assume !(0 == ~currentFloorID~0); 278975#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 278276#L2688-1 assume { :end_inline_continueInDirection } true; 278270#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 282743#L1436 assume !(-1 == ~expectedDirection~0); 282740#L1448 assume !(1 == ~expectedDirection~0); 282738#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 282737#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 282736#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 282735#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 282733#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 282730#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 282725#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 282711#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 282706#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 282698#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 282697#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 282696#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 282695#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 282693#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 282690#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 282691#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 289495#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 289496#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 289487#L2854-2 assume !(0 != timeShift_~tmp___9~3); 280279#L2945-3 assume !(1 == ~doorState~0); 280280#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 281080#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 281081#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 301275#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 301273#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 301272#L2672-3 assume !(1 == ~currentHeading~0); 301271#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 278944#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 278946#L2688-7 assume { :end_inline_continueInDirection } true; 288290#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 288291#L1436-1 assume !(-1 == ~expectedDirection~0); 288280#L1448-1 assume !(1 == ~expectedDirection~0); 288279#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 288274#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 288275#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 288270#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 288271#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 294932#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 288268#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 288263#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 288260#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 288233#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 287729#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 287727#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 287517#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 287514#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 287515#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 287516#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 287513#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 287511#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 287510#L2854-4 assume !(0 != timeShift_~tmp___9~3); 280284#L2945-6 assume !(1 == ~doorState~0); 280285#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 282399#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 282400#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 301022#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 301020#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 280743#L2672-6 assume !(1 == ~currentHeading~0); 280744#L2682-18 assume !(0 == ~currentFloorID~0); 278886#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 278890#L2688-13 assume { :end_inline_continueInDirection } true; 286351#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 286352#L1436-2 assume !(-1 == ~expectedDirection~0); 286343#L1448-2 assume !(1 == ~expectedDirection~0); 286341#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 286340#L2977-2 assume { :end_inline_timeShift } true; 286339#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 286338#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 286332#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 286330#L970-1 assume 0 == initPersonOnFloor_~floor; 286331#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 286288#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 286289#L762-2 assume !(0 == callOnFloor_~floorID); 293270#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 286279#L774-5 assume { :end_inline_callOnFloor } true; 286280#L1114-1 assume { :end_inline_initPersonOnFloor } true; 286141#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 286142#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 286017#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 286018#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 297350#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 286011#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 286009#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 286007#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 285845#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 285830#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 285829#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 285824#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 285821#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 285822#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 285823#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 285820#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 285818#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 285805#L2854-6 assume !(0 != timeShift_~tmp___9~3); 285806#L2945-9 assume !(1 == ~doorState~0); 297859#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 282401#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 282402#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 297823#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 297821#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 297820#L2672-9 assume !(1 == ~currentHeading~0); 297819#L2682-27 assume !(0 == ~currentFloorID~0); 278866#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 279068#L2688-19 assume { :end_inline_continueInDirection } true; 282941#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 282899#L1436-3 assume !(-1 == ~expectedDirection~0); 282898#L1448-3 assume !(1 == ~expectedDirection~0); 282879#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 282880#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 282872#L188-3 [2018-11-18 11:17:18,339 INFO L796 eck$LassoCheckResult]: Loop: 282872#L188-3 assume true; 282873#L188-1 assume !false; 282868#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 282869#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 282864#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 282865#L196 assume 1 != cleanup_~tmp___0~0; 282859#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 282860#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 282839#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 282840#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 291655#L2204 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 282802#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 282803#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 282798#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 282799#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 282794#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 282795#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 297275#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 282787#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 282786#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 282785#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 282755#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 282752#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 282751#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 282750#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 282748#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 282745#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 282746#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 285659#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 285658#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 285651#L2854-8 assume !(0 != timeShift_~tmp___9~3); 285652#L2945-12 assume !(1 == ~doorState~0); 301183#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 282404#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 282405#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 301154#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 301152#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 301151#L2672-12 assume !(1 == ~currentHeading~0); 301150#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 279035#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 279036#L2688-25 assume { :end_inline_continueInDirection } true; 282910#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 282893#L1436-4 assume !(-1 == ~expectedDirection~0); 282892#L1448-4 assume !(1 == ~expectedDirection~0); 282877#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 282878#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 282872#L188-3 [2018-11-18 11:17:18,345 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:18,345 INFO L82 PathProgramCache]: Analyzing trace with hash 299544833, now seen corresponding path program 1 times [2018-11-18 11:17:18,345 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:18,345 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:18,345 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:18,346 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:18,346 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:18,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:19,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:19,148 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:19,148 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:19,149 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:19,149 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:19,149 INFO L82 PathProgramCache]: Analyzing trace with hash -453008738, now seen corresponding path program 1 times [2018-11-18 11:17:19,149 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:19,149 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:19,150 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:19,150 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:19,150 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:19,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:19,250 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:19,251 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:19,251 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:17:19,251 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:19,251 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:17:19,251 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:17:19,251 INFO L87 Difference]: Start difference. First operand 25099 states and 46463 transitions. cyclomatic complexity: 21365 Second operand 5 states. [2018-11-18 11:17:21,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:21,469 INFO L93 Difference]: Finished difference Result 112545 states and 209944 transitions. [2018-11-18 11:17:21,469 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 11:17:21,469 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 112545 states and 209944 transitions. [2018-11-18 11:17:22,004 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 28811 [2018-11-18 11:17:22,171 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 112545 states to 112545 states and 209944 transitions. [2018-11-18 11:17:22,171 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 112545 [2018-11-18 11:17:22,215 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 112545 [2018-11-18 11:17:22,215 INFO L73 IsDeterministic]: Start isDeterministic. Operand 112545 states and 209944 transitions. [2018-11-18 11:17:22,254 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:22,254 INFO L705 BuchiCegarLoop]: Abstraction has 112545 states and 209944 transitions. [2018-11-18 11:17:22,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112545 states and 209944 transitions. [2018-11-18 11:17:22,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112545 to 49063. [2018-11-18 11:17:22,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49063 states. [2018-11-18 11:17:22,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49063 states to 49063 states and 90867 transitions. [2018-11-18 11:17:22,649 INFO L728 BuchiCegarLoop]: Abstraction has 49063 states and 90867 transitions. [2018-11-18 11:17:22,649 INFO L608 BuchiCegarLoop]: Abstraction has 49063 states and 90867 transitions. [2018-11-18 11:17:22,649 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-18 11:17:22,650 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49063 states and 90867 transitions. [2018-11-18 11:17:22,725 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11580 [2018-11-18 11:17:22,725 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:22,726 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:22,728 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:22,728 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:22,729 INFO L794 eck$LassoCheckResult]: Stem: 417657#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 417658#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 419465#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 419634#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 419635#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 418489#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 418490#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 415509#L692 assume { :end_inline_initFloors } true; 415340#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 415341#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 417274#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 418514#L970 assume 0 == initPersonOnFloor_~floor; 419232#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 414258#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 417021#L762 assume !(0 == callOnFloor_~floorID); 416890#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 414106#L774-2 assume { :end_inline_callOnFloor } true; 422014#L1114 assume { :end_inline_initPersonOnFloor } true; 422013#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 422012#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 422011#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 422009#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 422010#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 419737#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 419323#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 419931#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 421973#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 421972#L699 assume !(0 == isFloorCalling_~floorID); 421971#L703 assume !(1 == isFloorCalling_~floorID); 421969#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 421967#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 421966#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 421965#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 421961#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 421960#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 421959#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 421958#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 421957#L2854 assume !(0 != timeShift_~tmp___9~3); 421956#L2945 assume !(1 == ~doorState~0); 421955#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 421954#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 416614#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 416615#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 414307#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 421947#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 421948#L2672 assume !(1 == ~currentHeading~0); 422440#L2682 assume !(0 == ~currentFloorID~0); 422435#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 422432#L2688-1 assume { :end_inline_continueInDirection } true; 422429#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 422427#L1436 assume !(-1 == ~expectedDirection~0); 422424#L1448 assume !(1 == ~expectedDirection~0); 422422#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 422421#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 422417#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 422414#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 422412#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 422413#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 422403#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 422388#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 422382#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 422373#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 422372#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 422370#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 422369#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 422367#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 422361#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 422357#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 422350#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 422347#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 422345#L2854-2 assume !(0 != timeShift_~tmp___9~3); 422195#L2945-3 assume !(1 == ~doorState~0); 422196#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 422161#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 422162#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 422191#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 422210#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 422211#L2672-3 assume !(1 == ~currentHeading~0); 422573#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 422564#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 422561#L2688-7 assume { :end_inline_continueInDirection } true; 422559#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 430493#L1436-1 assume !(-1 == ~expectedDirection~0); 430490#L1448-1 assume !(1 == ~expectedDirection~0); 430488#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 430487#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 430486#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 430485#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 430483#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 430482#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 421259#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 421257#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 421255#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 421225#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 421217#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 421215#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 421214#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 421213#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 421210#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 421207#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 421206#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 421205#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 421204#L2854-4 assume !(0 != timeShift_~tmp___9~3); 421203#L2945-6 assume !(1 == ~doorState~0); 421202#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 421200#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 421198#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 421199#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 428124#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 428126#L2672-6 assume !(1 == ~currentHeading~0); 430218#L2682-18 assume !(0 == ~currentFloorID~0); 430214#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 430182#L2688-13 assume { :end_inline_continueInDirection } true; 430180#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 430177#L1436-2 assume !(-1 == ~expectedDirection~0); 430175#L1448-2 assume !(1 == ~expectedDirection~0); 430173#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 430172#L2977-2 assume { :end_inline_timeShift } true; 430171#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 430170#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 430164#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 430163#L970-1 assume 0 == initPersonOnFloor_~floor; 430146#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 430129#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 430127#L762-2 assume !(0 == callOnFloor_~floorID); 430125#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 430122#L774-5 assume { :end_inline_callOnFloor } true; 430121#L1114-1 assume { :end_inline_initPersonOnFloor } true; 430120#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 430119#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 430118#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 430116#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 430115#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 420726#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 420629#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 420627#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 420602#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 420563#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 420560#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 420557#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 420546#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 420542#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 420535#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 420536#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 420527#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 420528#L2854-6 assume !(0 != timeShift_~tmp___9~3); 420521#L2945-9 assume !(1 == ~doorState~0); 420522#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 420485#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 420486#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 420443#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 420444#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 420437#L2672-9 assume !(1 == ~currentHeading~0); 420438#L2682-27 assume !(0 == ~currentFloorID~0); 429552#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 429549#L2688-19 assume { :end_inline_continueInDirection } true; 429543#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 429540#L1436-3 assume !(-1 == ~expectedDirection~0); 429534#L1448-3 assume !(1 == ~expectedDirection~0); 429529#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 429527#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 429525#L188-3 [2018-11-18 11:17:22,729 INFO L796 eck$LassoCheckResult]: Loop: 429525#L188-3 assume true; 429524#L188-1 assume !false; 429523#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 429522#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 429521#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 429520#L196 assume 1 != cleanup_~tmp___0~0; 429517#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 429513#L699-84 assume !(0 == isFloorCalling_~floorID); 429510#L703-84 assume !(1 == isFloorCalling_~floorID); 429496#L707-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 429489#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 429479#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 429474#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 429473#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 429472#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 429471#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 429470#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 429468#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 429467#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 428427#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 428425#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 428423#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 428390#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 428347#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 428120#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 428119#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 428118#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 428117#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 428111#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 428105#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 428100#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 428057#L2854-8 assume !(0 != timeShift_~tmp___9~3); 428056#L2945-12 assume !(1 == ~doorState~0); 428055#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 428053#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 428004#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 427992#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 427986#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 427988#L2672-12 assume !(1 == ~currentHeading~0); 427981#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 427982#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 429546#L2688-25 assume { :end_inline_continueInDirection } true; 429542#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 429537#L1436-4 assume !(-1 == ~expectedDirection~0); 429531#L1448-4 assume !(1 == ~expectedDirection~0); 429528#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 429526#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 429525#L188-3 [2018-11-18 11:17:22,736 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:22,737 INFO L82 PathProgramCache]: Analyzing trace with hash 299544833, now seen corresponding path program 2 times [2018-11-18 11:17:22,737 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:22,737 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:22,737 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:22,737 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:22,737 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:22,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:23,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:23,529 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:23,529 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:23,529 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:23,529 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:23,529 INFO L82 PathProgramCache]: Analyzing trace with hash 862163130, now seen corresponding path program 1 times [2018-11-18 11:17:23,530 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:23,530 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:23,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:23,530 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:17:23,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:23,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:23,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:23,548 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:23,548 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:17:23,548 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:23,548 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:17:23,548 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:17:23,548 INFO L87 Difference]: Start difference. First operand 49063 states and 90867 transitions. cyclomatic complexity: 41805 Second operand 3 states. [2018-11-18 11:17:24,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:24,273 INFO L93 Difference]: Finished difference Result 54493 states and 100277 transitions. [2018-11-18 11:17:24,275 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:17:24,275 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54493 states and 100277 transitions. [2018-11-18 11:17:24,398 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12624 [2018-11-18 11:17:24,487 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54493 states to 54493 states and 100277 transitions. [2018-11-18 11:17:24,488 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 54493 [2018-11-18 11:17:24,515 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 54493 [2018-11-18 11:17:24,515 INFO L73 IsDeterministic]: Start isDeterministic. Operand 54493 states and 100277 transitions. [2018-11-18 11:17:24,536 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:24,537 INFO L705 BuchiCegarLoop]: Abstraction has 54493 states and 100277 transitions. [2018-11-18 11:17:24,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54493 states and 100277 transitions. [2018-11-18 11:17:25,094 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54493 to 49063. [2018-11-18 11:17:25,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49063 states. [2018-11-18 11:17:25,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49063 states to 49063 states and 90591 transitions. [2018-11-18 11:17:25,138 INFO L728 BuchiCegarLoop]: Abstraction has 49063 states and 90591 transitions. [2018-11-18 11:17:25,138 INFO L608 BuchiCegarLoop]: Abstraction has 49063 states and 90591 transitions. [2018-11-18 11:17:25,138 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-18 11:17:25,138 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49063 states and 90591 transitions. [2018-11-18 11:17:25,213 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11580 [2018-11-18 11:17:25,213 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:25,213 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:25,216 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:25,216 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:25,218 INFO L794 eck$LassoCheckResult]: Stem: 521177#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 521178#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 522909#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 523064#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 523065#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 521964#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 521965#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 519069#L692 assume { :end_inline_initFloors } true; 518912#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 518913#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 520816#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 521991#L970 assume 0 == initPersonOnFloor_~floor; 522676#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 517825#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 520581#L762 assume !(0 == callOnFloor_~floorID); 520447#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 517673#L774-2 assume { :end_inline_callOnFloor } true; 534198#L1114 assume { :end_inline_initPersonOnFloor } true; 534197#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 534196#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 534195#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 534193#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 534191#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 534192#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 534205#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 534175#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 534163#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 534162#L699 assume !(0 == isFloorCalling_~floorID); 534161#L703 assume !(1 == isFloorCalling_~floorID); 534159#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 534157#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 534156#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 534155#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 534096#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 534095#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 534094#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 534093#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 534092#L2854 assume !(0 != timeShift_~tmp___9~3); 534091#L2945 assume !(1 == ~doorState~0); 534090#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 534089#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 534088#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 523600#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 517874#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 537309#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 537307#L2672 assume !(1 == ~currentHeading~0); 537301#L2682 assume !(0 == ~currentFloorID~0); 537299#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 537298#L2688-1 assume { :end_inline_continueInDirection } true; 537295#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 537293#L1436 assume !(-1 == ~expectedDirection~0); 537288#L1448 assume !(1 == ~expectedDirection~0); 537286#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 537284#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 537283#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 537282#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 537280#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 537281#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 538063#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 538062#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 538061#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 538027#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 523019#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 531255#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 531250#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 531246#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 531247#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 531249#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 531248#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 531245#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 531242#L2854-2 assume !(0 != timeShift_~tmp___9~3); 521587#L2945-3 assume !(1 == ~doorState~0); 521588#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 522427#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 522428#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 539592#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 540492#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 540493#L2672-3 assume !(1 == ~currentHeading~0); 540543#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 520212#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 519517#L2688-7 assume { :end_inline_continueInDirection } true; 519518#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 539489#L1436-1 assume !(-1 == ~expectedDirection~0); 539058#L1448-1 assume !(1 == ~expectedDirection~0); 539053#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 539051#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 539046#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 539044#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 539035#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 539037#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 527400#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 527399#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 527057#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 526717#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 526302#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 526301#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 526296#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 526293#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 526294#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 526295#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 526292#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 526290#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 526282#L2854-4 assume !(0 != timeShift_~tmp___9~3); 526283#L2945-6 assume !(1 == ~doorState~0); 539364#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 539362#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 539363#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 539360#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 539462#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 539460#L2672-6 assume !(1 == ~currentHeading~0); 539455#L2682-18 assume !(0 == ~currentFloorID~0); 539452#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 539048#L2688-13 assume { :end_inline_continueInDirection } true; 539045#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 539038#L1436-2 assume !(-1 == ~expectedDirection~0); 524124#L1448-2 assume !(1 == ~expectedDirection~0); 524121#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 524117#L2977-2 assume { :end_inline_timeShift } true; 524113#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 524111#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 524091#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 524090#L970-1 assume 0 == initPersonOnFloor_~floor; 524042#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 524024#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 524019#L762-2 assume !(0 == callOnFloor_~floorID); 524021#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 561662#L774-5 assume { :end_inline_callOnFloor } true; 561660#L1114-1 assume { :end_inline_initPersonOnFloor } true; 561658#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 561656#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 561654#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 561651#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 561652#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 523960#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 523959#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 523940#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 523925#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 523910#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 523908#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 523907#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 523906#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 523903#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 523900#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 523895#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 523891#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 523879#L2854-6 assume !(0 != timeShift_~tmp___9~3); 523880#L2945-9 assume !(1 == ~doorState~0); 558220#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 523844#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 523845#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 558201#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 558199#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 558200#L2672-9 assume !(1 == ~currentHeading~0); 523810#L2682-27 assume !(0 == ~currentFloorID~0); 520140#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 520329#L2688-19 assume { :end_inline_continueInDirection } true; 540885#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 540882#L1436-3 assume !(-1 == ~expectedDirection~0); 540876#L1448-3 assume !(1 == ~expectedDirection~0); 540871#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 540869#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 540867#L188-3 [2018-11-18 11:17:25,218 INFO L796 eck$LassoCheckResult]: Loop: 540867#L188-3 assume true; 540866#L188-1 assume !false; 540865#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 540864#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 540863#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 540862#L196 assume 1 != cleanup_~tmp___0~0; 540860#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 540861#L699-84 assume !(0 == isFloorCalling_~floorID); 540851#L703-84 assume !(1 == isFloorCalling_~floorID); 540852#L707-84 assume !(2 == isFloorCalling_~floorID); 540839#L711-84 assume !(3 == isFloorCalling_~floorID); 540840#L715-84 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~5 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 540814#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 540815#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 553392#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 558427#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 558426#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 558425#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 558424#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 558422#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 558423#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 540787#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 540775#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 540767#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 540760#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 540757#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 540755#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 540754#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 540752#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 540749#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 540750#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 542101#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 542100#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 542093#L2854-8 assume !(0 != timeShift_~tmp___9~3); 542094#L2945-12 assume !(1 == ~doorState~0); 544123#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 544120#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 543995#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 543984#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 543833#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 543795#L2672-12 assume !(1 == ~currentHeading~0); 540921#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 540900#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 540890#L2688-25 assume { :end_inline_continueInDirection } true; 540884#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 540879#L1436-4 assume !(-1 == ~expectedDirection~0); 540873#L1448-4 assume !(1 == ~expectedDirection~0); 540870#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 540868#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 540867#L188-3 [2018-11-18 11:17:25,228 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:25,228 INFO L82 PathProgramCache]: Analyzing trace with hash 299544833, now seen corresponding path program 3 times [2018-11-18 11:17:25,228 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:25,229 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:25,229 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:25,229 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:25,229 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:25,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:25,992 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:25,993 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:25,993 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:25,993 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:25,993 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:25,993 INFO L82 PathProgramCache]: Analyzing trace with hash 718765971, now seen corresponding path program 1 times [2018-11-18 11:17:25,993 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:25,994 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:26,002 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:26,003 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:17:26,003 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:26,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:26,025 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:26,025 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:26,025 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:26,025 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:26,025 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 11:17:26,025 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 11:17:26,026 INFO L87 Difference]: Start difference. First operand 49063 states and 90591 transitions. cyclomatic complexity: 41529 Second operand 4 states. [2018-11-18 11:17:26,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:26,930 INFO L93 Difference]: Finished difference Result 97292 states and 180148 transitions. [2018-11-18 11:17:26,930 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 11:17:26,931 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 97292 states and 180148 transitions. [2018-11-18 11:17:27,141 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33595 [2018-11-18 11:17:27,298 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 97292 states to 97292 states and 180148 transitions. [2018-11-18 11:17:27,298 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 97292 [2018-11-18 11:17:27,345 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 97292 [2018-11-18 11:17:27,345 INFO L73 IsDeterministic]: Start isDeterministic. Operand 97292 states and 180148 transitions. [2018-11-18 11:17:27,384 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:27,384 INFO L705 BuchiCegarLoop]: Abstraction has 97292 states and 180148 transitions. [2018-11-18 11:17:27,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97292 states and 180148 transitions. [2018-11-18 11:17:27,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97292 to 49063. [2018-11-18 11:17:27,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49063 states. [2018-11-18 11:17:27,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49063 states to 49063 states and 90575 transitions. [2018-11-18 11:17:27,760 INFO L728 BuchiCegarLoop]: Abstraction has 49063 states and 90575 transitions. [2018-11-18 11:17:27,760 INFO L608 BuchiCegarLoop]: Abstraction has 49063 states and 90575 transitions. [2018-11-18 11:17:27,760 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-18 11:17:27,760 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49063 states and 90575 transitions. [2018-11-18 11:17:27,835 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11580 [2018-11-18 11:17:27,835 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:27,835 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:27,837 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:27,837 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:27,837 INFO L794 eck$LassoCheckResult]: Stem: 667537#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 667538#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 669279#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 669457#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 669458#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 668334#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 668335#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 665431#L692 assume { :end_inline_initFloors } true; 665281#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 665282#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 667180#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 668362#L970 assume 0 == initPersonOnFloor_~floor; 669040#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 664191#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 666938#L762 assume !(0 == callOnFloor_~floorID); 666806#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 663974#L774-2 assume { :end_inline_callOnFloor } true; 663975#L1114 assume { :end_inline_initPersonOnFloor } true; 666961#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 664767#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 664768#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 664053#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 664054#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 669568#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 669138#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 665780#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 664108#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 665272#L699 assume !(0 == isFloorCalling_~floorID); 665273#L703 assume !(1 == isFloorCalling_~floorID); 669227#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 667631#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 665053#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 665054#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 669461#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 668739#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 663997#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 663999#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 670312#L2854 assume !(0 != timeShift_~tmp___9~3); 667955#L2945 assume !(1 == ~doorState~0); 667956#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 667958#L2296 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 666533#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 666534#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 667395#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 678444#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 678443#L2672 assume !(1 == ~currentHeading~0); 678440#L2682 assume !(0 == ~currentFloorID~0); 678362#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 678273#L2688-1 assume { :end_inline_continueInDirection } true; 678270#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 678263#L1436 assume !(-1 == ~expectedDirection~0); 678254#L1448 assume !(1 == ~expectedDirection~0); 678246#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 678240#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 678236#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 678230#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 678225#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 678220#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 678218#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 678203#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 678197#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 678188#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 678185#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 678179#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 678177#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 678173#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 678175#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 678178#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 678176#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 678157#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 678158#L2854-2 assume !(0 != timeShift_~tmp___9~3); 679274#L2945-3 assume !(1 == ~doorState~0); 679273#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 679271#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 679270#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 664875#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 680679#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 668445#L2672-3 assume !(1 == ~currentHeading~0); 668446#L2682-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 666570#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 665874#L2688-7 assume { :end_inline_continueInDirection } true; 665875#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 674525#L1436-1 assume !(-1 == ~expectedDirection~0); 674517#L1448-1 assume !(1 == ~expectedDirection~0); 674050#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 674049#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 674048#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 674047#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 674045#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 674046#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 674032#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 674026#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 674011#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 674004#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 673998#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 673992#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 673990#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 673986#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 673988#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 673991#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 673989#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 673984#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 673985#L2854-4 assume !(0 != timeShift_~tmp___9~3); 674298#L2945-6 assume !(1 == ~doorState~0); 674297#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 674295#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 674291#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 674124#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 674118#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 674110#L2672-6 assume !(1 == ~currentHeading~0); 674101#L2682-18 assume !(0 == ~currentFloorID~0); 674070#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 674052#L2688-13 assume { :end_inline_continueInDirection } true; 670600#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 670593#L1436-2 assume !(-1 == ~expectedDirection~0); 670588#L1448-2 assume !(1 == ~expectedDirection~0); 670585#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 670583#L2977-2 assume { :end_inline_timeShift } true; 670581#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 670574#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 670567#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 670565#L970-1 assume 0 == initPersonOnFloor_~floor; 670544#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 670496#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 670493#L762-2 assume !(0 == callOnFloor_~floorID); 670489#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 670482#L774-5 assume { :end_inline_callOnFloor } true; 670480#L1114-1 assume { :end_inline_initPersonOnFloor } true; 670478#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 670476#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 670474#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 670468#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 670470#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 670453#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 670419#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 670398#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 670382#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 670367#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 670365#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 670364#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 670363#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 670360#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 670358#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 670352#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 670353#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 670347#L2854-6 assume !(0 != timeShift_~tmp___9~3); 670348#L2945-9 assume !(1 == ~doorState~0); 670343#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 670344#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 687293#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 670317#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 670318#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 687321#L2672-9 assume !(1 == ~currentHeading~0); 707344#L2682-27 assume !(0 == ~currentFloorID~0); 707342#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 707315#L2688-19 assume { :end_inline_continueInDirection } true; 707312#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 707310#L1436-3 assume !(-1 == ~expectedDirection~0); 707307#L1448-3 assume !(1 == ~expectedDirection~0); 707305#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 687795#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 687793#L188-3 [2018-11-18 11:17:27,837 INFO L796 eck$LassoCheckResult]: Loop: 687793#L188-3 assume true; 687789#L188-1 assume !false; 687767#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 687766#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 687763#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 687757#L196 assume 1 != cleanup_~tmp___0~0; 687758#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 687744#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 687742#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 687743#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 687731#L2204 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 687733#L699-85 assume !(0 == isFloorCalling_~floorID); 687726#L703-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 687710#L726-85 anyStopRequested_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2 := anyStopRequested_#t~ret71;havoc anyStopRequested_#t~ret71; 687704#L2211 assume 0 != anyStopRequested_~tmp___2~2;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 687696#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 687695#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 687694#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 687685#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 687683#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 687684#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 688113#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 687667#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 687654#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 687645#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 687637#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 687620#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 687618#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 687617#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 687616#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 687615#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 687610#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 687608#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 687607#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 687605#L2854-8 assume !(0 != timeShift_~tmp___9~3); 687604#L2945-12 assume !(1 == ~doorState~0); 687603#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 687601#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 687594#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 687595#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 687822#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 687819#L2672-12 assume !(1 == ~currentHeading~0); 687816#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 687815#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 687814#L2688-25 assume { :end_inline_continueInDirection } true; 687811#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 687804#L1436-4 assume !(-1 == ~expectedDirection~0); 687801#L1448-4 assume !(1 == ~expectedDirection~0); 687800#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 687794#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 687793#L188-3 [2018-11-18 11:17:27,847 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:27,847 INFO L82 PathProgramCache]: Analyzing trace with hash 299544833, now seen corresponding path program 4 times [2018-11-18 11:17:27,847 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:27,847 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:27,847 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:27,847 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:27,848 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:27,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:28,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:28,576 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:28,576 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:28,576 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:28,576 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:28,576 INFO L82 PathProgramCache]: Analyzing trace with hash -1763817834, now seen corresponding path program 1 times [2018-11-18 11:17:28,577 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:28,577 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:28,577 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:28,577 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:17:28,577 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:28,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:28,603 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:28,603 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:28,603 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:28,603 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:28,603 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 11:17:28,603 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 11:17:28,603 INFO L87 Difference]: Start difference. First operand 49063 states and 90575 transitions. cyclomatic complexity: 41513 Second operand 4 states. [2018-11-18 11:17:29,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:29,012 INFO L93 Difference]: Finished difference Result 90083 states and 166727 transitions. [2018-11-18 11:17:29,013 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 11:17:29,013 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 90083 states and 166727 transitions. [2018-11-18 11:17:29,603 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22104 [2018-11-18 11:17:29,717 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 90083 states to 90083 states and 166727 transitions. [2018-11-18 11:17:29,717 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 90083 [2018-11-18 11:17:29,759 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 90083 [2018-11-18 11:17:29,759 INFO L73 IsDeterministic]: Start isDeterministic. Operand 90083 states and 166727 transitions. [2018-11-18 11:17:29,792 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:29,792 INFO L705 BuchiCegarLoop]: Abstraction has 90083 states and 166727 transitions. [2018-11-18 11:17:29,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90083 states and 166727 transitions. [2018-11-18 11:17:30,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90083 to 49115. [2018-11-18 11:17:30,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49115 states. [2018-11-18 11:17:30,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49115 states to 49115 states and 90627 transitions. [2018-11-18 11:17:30,165 INFO L728 BuchiCegarLoop]: Abstraction has 49115 states and 90627 transitions. [2018-11-18 11:17:30,165 INFO L608 BuchiCegarLoop]: Abstraction has 49115 states and 90627 transitions. [2018-11-18 11:17:30,165 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-18 11:17:30,165 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49115 states and 90627 transitions. [2018-11-18 11:17:30,241 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11592 [2018-11-18 11:17:30,241 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:30,241 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:30,242 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:30,243 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:30,243 INFO L794 eck$LassoCheckResult]: Stem: 806777#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 806778#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 808642#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 808820#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 808821#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 807631#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 807632#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 804610#L692 assume { :end_inline_initFloors } true; 804446#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 804447#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 806404#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 807658#L970 assume 0 == initPersonOnFloor_~floor; 808391#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 803348#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 806150#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 806151#L774-2 assume { :end_inline_callOnFloor } true; 810534#L1114 assume { :end_inline_initPersonOnFloor } true; 810533#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 810532#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 810531#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 810529#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 810530#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 810543#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 810539#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 804967#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 803265#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 804438#L699 assume !(0 == isFloorCalling_~floorID); 804439#L703 assume !(1 == isFloorCalling_~floorID); 808585#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 808586#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 804221#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 804222#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 808824#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 808068#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 803154#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 803156#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 809665#L2854 assume !(0 != timeShift_~tmp___9~3); 809666#L2945 assume !(1 == ~doorState~0); 807238#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 807239#L2296 assume !(1 == stopRequestedInDirection_~dir); 808671#L2465 assume !(0 == ~currentFloorID~0); 808672#L2471 assume !(~currentFloorID~0 > 0); 807022#L2486 assume ~currentFloorID~0 > 0; 807023#L2488 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 806477#L2489 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 806478#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 809866#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 807782#L2672 assume !(1 == ~currentHeading~0); 807783#L2682 assume !(0 == ~currentFloorID~0); 805769#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 805770#L2688-1 assume { :end_inline_continueInDirection } true; 814822#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 814817#L1436 assume !(-1 == ~expectedDirection~0); 814666#L1448 assume !(1 == ~expectedDirection~0); 814584#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 813593#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 813592#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 813591#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 813590#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 813587#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 813588#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 817067#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 817060#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 817055#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 817054#L699-21 assume !(0 == isFloorCalling_~floorID); 817053#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 817048#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 817044#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 817040#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 817041#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 822098#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 822097#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 822091#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 822089#L2854-2 assume !(0 != timeShift_~tmp___9~3); 810896#L2945-3 assume !(1 == ~doorState~0); 809995#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 809996#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 809989#L2465-2 assume !(0 == ~currentFloorID~0); 809986#L2471-2 assume !(~currentFloorID~0 > 0); 806693#L2486-2 assume ~currentFloorID~0 > 0; 806694#L2488-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 806482#L2489-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 803369#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 817022#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 817426#L2672-3 assume !(1 == ~currentHeading~0); 805756#L2682-9 assume !(0 == ~currentFloorID~0); 805757#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 805068#L2688-7 assume { :end_inline_continueInDirection } true; 805069#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 823972#L1436-1 assume !(-1 == ~expectedDirection~0); 823971#L1448-1 assume !(1 == ~expectedDirection~0); 820918#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 820801#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 820745#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 820742#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 820736#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 820738#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 826748#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 838895#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 838883#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 838879#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 838878#L699-42 assume !(0 == isFloorCalling_~floorID); 838865#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 838862#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 838859#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 838854#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 838849#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 838846#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 838844#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 838838#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 838836#L2854-4 assume !(0 != timeShift_~tmp___9~3); 811030#L2945-6 assume !(1 == ~doorState~0); 810014#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 810015#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 810006#L2465-4 assume !(0 == ~currentFloorID~0); 810007#L2471-4 assume !(~currentFloorID~0 > 0); 810001#L2486-4 assume ~currentFloorID~0 > 0; 851500#L2488-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 806497#L2489-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 803374#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 817194#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 817195#L2672-6 assume !(1 == ~currentHeading~0); 805698#L2682-18 assume !(0 == ~currentFloorID~0); 805699#L2682-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 805319#L2688-13 assume { :end_inline_continueInDirection } true; 805320#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 806182#L1436-2 assume !(-1 == ~expectedDirection~0); 806372#L1448-2 assume !(1 == ~expectedDirection~0); 805545#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 803075#L2977-2 assume { :end_inline_timeShift } true; 803076#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 804401#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 806409#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 807657#L970-1 assume 0 == initPersonOnFloor_~floor; 808366#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 803322#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 806130#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 803142#L774-5 assume { :end_inline_callOnFloor } true; 803162#L1114-1 assume { :end_inline_initPersonOnFloor } true; 806152#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 834158#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 834159#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 830388#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 830390#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 846710#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 846697#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 846690#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 846686#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 846685#L699-63 assume !(0 == isFloorCalling_~floorID); 845201#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 845194#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 845190#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 845191#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 845197#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 845193#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 845192#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 826799#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 826800#L2854-6 assume !(0 != timeShift_~tmp___9~3); 809842#L2945-9 assume !(1 == ~doorState~0); 809787#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 809781#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 809782#L2465-6 assume !(0 == ~currentFloorID~0); 809897#L2471-6 assume !(~currentFloorID~0 > 0); 806716#L2486-6 assume ~currentFloorID~0 > 0; 806718#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 806459#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 806460#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 811034#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 811035#L2672-9 assume !(1 == ~currentHeading~0); 805679#L2682-27 assume !(0 == ~currentFloorID~0); 805680#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 805308#L2688-19 assume { :end_inline_continueInDirection } true; 805277#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 806091#L1436-3 assume !(-1 == ~expectedDirection~0); 806363#L1448-3 assume !(1 == ~expectedDirection~0); 805506#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 803052#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 803053#L188-3 [2018-11-18 11:17:30,243 INFO L796 eck$LassoCheckResult]: Loop: 803053#L188-3 assume true; 809216#L188-1 assume !false; 809217#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 809149#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 806519#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 806520#L196 assume 1 != cleanup_~tmp___0~0; 806714#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 806715#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 808964#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 852160#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 804007#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 804008#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 804653#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 842128#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 842127#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 842125#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 842126#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 842226#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 842222#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 842102#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 842101#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 842100#L699-89 assume !(0 == isFloorCalling_~floorID); 842097#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 842091#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 842086#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 842087#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 842093#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 842090#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 842088#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 842089#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 842077#L2854-8 assume !(0 != timeShift_~tmp___9~3); 842078#L2945-12 assume !(1 == ~doorState~0); 809925#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 809923#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 809916#L2465-8 assume !(0 == ~currentFloorID~0); 809914#L2471-8 assume !(~currentFloorID~0 > 0); 809912#L2486-8 assume ~currentFloorID~0 > 0; 848666#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 806471#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 803666#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 826380#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 826382#L2672-12 assume !(1 == ~currentHeading~0); 805873#L2682-36 assume !(0 == ~currentFloorID~0); 805874#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 805279#L2688-25 assume { :end_inline_continueInDirection } true; 805246#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 806078#L1436-4 assume !(-1 == ~expectedDirection~0); 806365#L1448-4 assume !(1 == ~expectedDirection~0); 805525#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 803057#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 803053#L188-3 [2018-11-18 11:17:30,253 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:30,253 INFO L82 PathProgramCache]: Analyzing trace with hash -609779873, now seen corresponding path program 1 times [2018-11-18 11:17:30,253 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:30,253 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:30,253 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:30,254 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:30,254 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:30,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:31,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:31,050 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:31,050 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:31,050 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:31,050 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:31,051 INFO L82 PathProgramCache]: Analyzing trace with hash 1529883648, now seen corresponding path program 1 times [2018-11-18 11:17:31,051 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:31,051 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:31,051 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:31,051 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:31,051 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:31,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:31,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:31,265 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:31,265 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:17:31,265 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:31,265 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:17:31,265 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:17:31,265 INFO L87 Difference]: Start difference. First operand 49115 states and 90627 transitions. cyclomatic complexity: 41513 Second operand 5 states. [2018-11-18 11:17:35,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:35,732 INFO L93 Difference]: Finished difference Result 64681 states and 118921 transitions. [2018-11-18 11:17:35,733 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 11:17:35,733 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64681 states and 118921 transitions. [2018-11-18 11:17:35,878 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15628 [2018-11-18 11:17:35,985 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64681 states to 64681 states and 118921 transitions. [2018-11-18 11:17:35,985 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64681 [2018-11-18 11:17:36,018 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64681 [2018-11-18 11:17:36,018 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64681 states and 118921 transitions. [2018-11-18 11:17:36,044 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:36,044 INFO L705 BuchiCegarLoop]: Abstraction has 64681 states and 118921 transitions. [2018-11-18 11:17:36,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64681 states and 118921 transitions. [2018-11-18 11:17:36,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64681 to 64113. [2018-11-18 11:17:36,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 64113 states. [2018-11-18 11:17:36,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64113 states to 64113 states and 118075 transitions. [2018-11-18 11:17:36,419 INFO L728 BuchiCegarLoop]: Abstraction has 64113 states and 118075 transitions. [2018-11-18 11:17:36,419 INFO L608 BuchiCegarLoop]: Abstraction has 64113 states and 118075 transitions. [2018-11-18 11:17:36,419 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-18 11:17:36,419 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64113 states and 118075 transitions. [2018-11-18 11:17:36,523 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15424 [2018-11-18 11:17:36,523 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:36,523 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:36,527 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:36,527 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:36,528 INFO L794 eck$LassoCheckResult]: Stem: 920534#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 920535#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 922265#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 922408#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 922409#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 921341#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 921342#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 918407#L692 assume { :end_inline_initFloors } true; 918248#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 918249#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 920188#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 921370#L970 assume 0 == initPersonOnFloor_~floor; 922057#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 917162#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 919941#L762 assume !(0 == callOnFloor_~floorID); 919801#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 916944#L774-2 assume { :end_inline_callOnFloor } true; 916945#L1114 assume { :end_inline_initPersonOnFloor } true; 919966#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 917739#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 917740#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 917024#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 917025#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 918858#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 922142#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 922640#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 939160#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 939159#L699 assume !(0 == isFloorCalling_~floorID); 939158#L703 assume !(1 == isFloorCalling_~floorID); 939156#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 939154#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 939153#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 939152#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 939143#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 939142#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 939140#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 939139#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 939137#L2854 assume !(0 != timeShift_~tmp___9~3); 939136#L2945 assume !(1 == ~doorState~0); 939135#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 939133#L2296 assume !(1 == stopRequestedInDirection_~dir); 939132#L2465 assume !(0 == ~currentFloorID~0); 939131#L2471 assume ~currentFloorID~0 > 0; 939130#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 918233#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 918234#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 920614#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 939105#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 923203#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 921478#L2672 assume !(1 == ~currentHeading~0); 919571#L2682 assume !(0 == ~currentFloorID~0); 919553#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 919554#L2688-1 assume { :end_inline_continueInDirection } true; 923179#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 923177#L1436 assume !(-1 == ~expectedDirection~0); 923174#L1448 assume !(1 == ~expectedDirection~0); 923172#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 923171#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 923170#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 923169#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 923167#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 923168#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 961102#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 961097#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 918344#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 918346#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 959989#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 959990#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 920520#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 920521#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 960295#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 962433#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 960296#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 959998#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 959999#L2854-2 assume !(0 != timeShift_~tmp___9~3); 920945#L2945-3 assume !(1 == ~doorState~0); 920946#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 920951#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 921798#L2465-2 assume !(0 == ~currentFloorID~0); 946495#L2471-2 assume ~currentFloorID~0 > 0; 944462#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 922484#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 920502#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 920503#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 917183#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 962358#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 921465#L2672-3 assume !(1 == ~currentHeading~0); 919541#L2682-9 assume !(0 == ~currentFloorID~0); 919542#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 919544#L2688-7 assume { :end_inline_continueInDirection } true; 959991#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 943606#L1436-1 assume !(-1 == ~expectedDirection~0); 943602#L1448-1 assume !(1 == ~expectedDirection~0); 943599#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 943598#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 943572#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 943570#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 943571#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 962889#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 932773#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 932771#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 932769#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 932765#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 932759#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 932757#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 932756#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 932754#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 932738#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 932733#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 932729#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 932727#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 932724#L2854-4 assume !(0 != timeShift_~tmp___9~3); 932723#L2945-6 assume !(1 == ~doorState~0); 932722#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 932721#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 932711#L2465-4 assume !(0 == ~currentFloorID~0); 932712#L2471-4 assume ~currentFloorID~0 > 0; 933290#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 934705#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 934704#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 934666#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 934656#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 934651#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 934650#L2672-6 assume !(1 == ~currentHeading~0); 934644#L2682-18 assume !(0 == ~currentFloorID~0); 932437#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 932431#L2688-13 assume { :end_inline_continueInDirection } true; 932423#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 932419#L1436-2 assume !(-1 == ~expectedDirection~0); 932416#L1448-2 assume !(1 == ~expectedDirection~0); 932411#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 932407#L2977-2 assume { :end_inline_timeShift } true; 932405#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 932403#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 932396#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 932373#L970-1 assume 0 == initPersonOnFloor_~floor; 932254#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 932235#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 932230#L762-2 assume !(0 == callOnFloor_~floorID); 932226#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 932224#L774-5 assume { :end_inline_callOnFloor } true; 932183#L1114-1 assume { :end_inline_initPersonOnFloor } true; 932184#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 932159#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 932160#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 929285#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 929286#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 929190#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 929189#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 929137#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 929124#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 929107#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 929103#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 929102#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 929101#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 929098#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 929095#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 929093#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 929092#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 929091#L2854-6 assume !(0 != timeShift_~tmp___9~3); 929090#L2945-9 assume !(1 == ~doorState~0); 929088#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 929084#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 929085#L2465-6 assume !(0 == ~currentFloorID~0); 926484#L2471-6 assume !(~currentFloorID~0 > 0); 926476#L2486-6 assume ~currentFloorID~0 > 0; 926477#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 926865#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 926866#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 944260#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 944257#L2672-9 assume !(1 == ~currentHeading~0); 944255#L2682-27 assume !(0 == ~currentFloorID~0); 944248#L2682-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 944249#L2688-19 assume { :end_inline_continueInDirection } true; 977331#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 977328#L1436-3 assume !(-1 == ~expectedDirection~0); 977322#L1448-3 assume !(1 == ~expectedDirection~0); 977317#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 977315#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 977313#L188-3 [2018-11-18 11:17:36,528 INFO L796 eck$LassoCheckResult]: Loop: 977313#L188-3 assume true; 977312#L188-1 assume !false; 977311#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 977310#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 977309#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 977307#L196 assume 1 != cleanup_~tmp___0~0; 977305#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 977302#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 977300#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 977298#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 944148#L2204 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 944147#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 944145#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 944143#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 944141#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 944139#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 944135#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 944136#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 945674#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 945670#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 944103#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 944102#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 944100#L699-89 assume !(0 == isFloorCalling_~floorID); 944095#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 944093#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 944092#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 944091#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 944084#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 944081#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 944079#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 944078#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 944076#L2854-8 assume !(0 != timeShift_~tmp___9~3); 944074#L2945-12 assume !(1 == ~doorState~0); 944073#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 944071#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 944072#L2465-8 assume !(0 == ~currentFloorID~0); 944075#L2471-8 assume ~currentFloorID~0 > 0; 944068#L2472-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 944047#L2486-8 assume ~currentFloorID~0 > 0; 944065#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 944060#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 924018#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 944997#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 944994#L2672-12 assume !(1 == ~currentHeading~0); 943654#L2682-36 assume !(0 == ~currentFloorID~0); 943648#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 943649#L2688-25 assume { :end_inline_continueInDirection } true; 977330#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 977325#L1436-4 assume !(-1 == ~expectedDirection~0); 977319#L1448-4 assume !(1 == ~expectedDirection~0); 977316#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 977314#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 977313#L188-3 [2018-11-18 11:17:36,542 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:36,542 INFO L82 PathProgramCache]: Analyzing trace with hash 1105140296, now seen corresponding path program 1 times [2018-11-18 11:17:36,542 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:36,542 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:36,543 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:36,543 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:36,543 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:36,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:37,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:37,357 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:37,358 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:37,358 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:37,358 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:37,358 INFO L82 PathProgramCache]: Analyzing trace with hash -635366105, now seen corresponding path program 1 times [2018-11-18 11:17:37,358 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:37,358 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:37,359 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:37,359 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:37,359 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:37,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:37,717 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:37,718 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:37,718 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:37,718 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:37,718 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 11:17:37,718 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 11:17:37,718 INFO L87 Difference]: Start difference. First operand 64113 states and 118075 transitions. cyclomatic complexity: 53963 Second operand 4 states. [2018-11-18 11:17:38,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:38,695 INFO L93 Difference]: Finished difference Result 84754 states and 154417 transitions. [2018-11-18 11:17:38,695 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 11:17:38,695 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 84754 states and 154417 transitions. [2018-11-18 11:17:38,880 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 20595 [2018-11-18 11:17:39,018 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 84754 states to 84754 states and 154417 transitions. [2018-11-18 11:17:39,018 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 84754 [2018-11-18 11:17:39,060 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 84754 [2018-11-18 11:17:39,060 INFO L73 IsDeterministic]: Start isDeterministic. Operand 84754 states and 154417 transitions. [2018-11-18 11:17:39,093 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:39,093 INFO L705 BuchiCegarLoop]: Abstraction has 84754 states and 154417 transitions. [2018-11-18 11:17:39,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84754 states and 154417 transitions. [2018-11-18 11:17:39,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84754 to 64113. [2018-11-18 11:17:39,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 64113 states. [2018-11-18 11:17:39,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64113 states to 64113 states and 117547 transitions. [2018-11-18 11:17:39,507 INFO L728 BuchiCegarLoop]: Abstraction has 64113 states and 117547 transitions. [2018-11-18 11:17:39,507 INFO L608 BuchiCegarLoop]: Abstraction has 64113 states and 117547 transitions. [2018-11-18 11:17:39,507 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-18 11:17:39,507 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64113 states and 117547 transitions. [2018-11-18 11:17:39,611 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15424 [2018-11-18 11:17:39,611 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:39,611 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:39,615 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:39,615 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:39,616 INFO L794 eck$LassoCheckResult]: Stem: 1069398#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1069399#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 1071163#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1071334#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1071335#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1070212#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 1070213#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1067271#L692 assume { :end_inline_initFloors } true; 1067120#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1067121#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1069042#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1070239#L970 assume 0 == initPersonOnFloor_~floor; 1070941#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1066043#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1068800#L762 assume !(0 == callOnFloor_~floorID); 1068663#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1065896#L774-2 assume { :end_inline_callOnFloor } true; 1072494#L1114 assume { :end_inline_initPersonOnFloor } true; 1072493#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1072492#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1072491#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1072489#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1072490#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1071432#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1071031#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1067624#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1065960#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1067115#L699 assume !(0 == isFloorCalling_~floorID); 1067116#L703 assume !(1 == isFloorCalling_~floorID); 1071119#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1071120#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1066909#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1066910#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1071338#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1070624#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1065848#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1065850#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1072156#L2854 assume !(0 != timeShift_~tmp___9~3); 1069819#L2945 assume !(1 == ~doorState~0); 1069820#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1069822#L2296 assume !(1 == stopRequestedInDirection_~dir); 1070660#L2465 assume !(0 == ~currentFloorID~0); 1070822#L2471 assume ~currentFloorID~0 > 0; 1070823#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1067106#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1067107#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1069473#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1072298#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1072295#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1072290#L2672 assume !(1 == ~currentHeading~0); 1072284#L2682 assume !(0 == ~currentFloorID~0); 1072278#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1072273#L2688-1 assume { :end_inline_continueInDirection } true; 1072270#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1072266#L1436 assume !(-1 == ~expectedDirection~0); 1072261#L1448 assume !(1 == ~expectedDirection~0); 1072259#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1072257#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1072255#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1072254#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1072251#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1072247#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1072244#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1072229#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1072223#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1072214#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1072213#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1072211#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1072210#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1072208#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1072204#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1072205#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1073542#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1073540#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1073538#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1073537#L2945-3 assume !(1 == ~doorState~0); 1072932#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1072926#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1072927#L2465-2 assume !(0 == ~currentFloorID~0); 1075971#L2471-2 assume ~currentFloorID~0 > 0; 1076476#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1076472#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1076421#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1076350#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1076332#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1076314#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1076310#L2672-3 assume !(1 == ~currentHeading~0); 1076306#L2682-9 assume !(0 == ~currentFloorID~0); 1072609#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1072594#L2688-7 assume { :end_inline_continueInDirection } true; 1072589#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1072587#L1436-1 assume !(-1 == ~expectedDirection~0); 1072584#L1448-1 assume !(1 == ~expectedDirection~0); 1072582#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1072581#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1072580#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1072579#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1072574#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1072576#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1072561#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1072558#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1072543#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1072536#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1072530#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1072528#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1072527#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1072525#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1072520#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1072521#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1107601#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1107602#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1107592#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1107593#L2945-6 assume !(1 == ~doorState~0); 1119315#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1119240#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1119241#L2465-4 assume !(0 == ~currentFloorID~0); 1071169#L2471-4 assume ~currentFloorID~0 > 0; 1119551#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1119548#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1119547#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1119431#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1119417#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1119412#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1119327#L2672-6 assume !(1 == ~currentHeading~0); 1119320#L2682-18 assume !(0 == ~currentFloorID~0); 1118943#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1118938#L2688-13 assume { :end_inline_continueInDirection } true; 1118936#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1118933#L1436-2 assume !(-1 == ~expectedDirection~0); 1118931#L1448-2 assume !(1 == ~expectedDirection~0); 1118929#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1118928#L2977-2 assume { :end_inline_timeShift } true; 1118927#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1118926#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1118920#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1118919#L970-1 assume 0 == initPersonOnFloor_~floor; 1118543#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1118525#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1118521#L762-2 assume !(0 == callOnFloor_~floorID); 1118515#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1118512#L774-5 assume { :end_inline_callOnFloor } true; 1118511#L1114-1 assume { :end_inline_initPersonOnFloor } true; 1118510#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1118509#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1118508#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1118507#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1118505#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1099546#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1099544#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1099513#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1099482#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1089374#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1089375#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1096321#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1096320#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1096317#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1096314#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1096312#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1096311#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1096310#L2854-6 assume !(0 != timeShift_~tmp___9~3); 1096309#L2945-9 assume !(1 == ~doorState~0); 1096308#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1096307#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1096304#L2465-6 assume !(0 == ~currentFloorID~0); 1096305#L2471-6 assume !(~currentFloorID~0 > 0); 1096379#L2486-6 assume ~currentFloorID~0 > 0; 1096380#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1099579#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1099580#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1115631#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1115629#L2672-9 assume !(1 == ~currentHeading~0); 1115628#L2682-27 assume !(0 == ~currentFloorID~0); 1115626#L2682-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1067946#L2688-19 assume { :end_inline_continueInDirection } true; 1067919#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1119620#L1436-3 assume !(-1 == ~expectedDirection~0); 1119617#L1448-3 assume !(1 == ~expectedDirection~0); 1119150#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1119149#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 1119146#L188-3 [2018-11-18 11:17:39,616 INFO L796 eck$LassoCheckResult]: Loop: 1119146#L188-3 assume true; 1119144#L188-1 assume !false; 1119142#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1119140#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1119139#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1118502#L196 assume 1 != cleanup_~tmp___0~0; 1105759#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1105756#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1105754#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1105755#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 1106047#L2204 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1099671#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1106011#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1106010#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1106008#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1106006#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1106003#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1106004#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1106031#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1106026#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1105973#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1105972#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1105971#L699-89 assume !(0 == isFloorCalling_~floorID); 1105964#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1105961#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1105957#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1105959#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1105968#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1105962#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1105960#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1105952#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1105953#L2854-8 assume !(0 != timeShift_~tmp___9~3); 1116567#L2945-12 assume !(1 == ~doorState~0); 1116566#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1072138#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1071148#L2465-8 assume !(0 == ~currentFloorID~0); 1070806#L2471-8 assume ~currentFloorID~0 > 0; 1070682#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1070683#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1116583#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1116499#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1083324#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1116332#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1116330#L2672-12 assume !(1 == ~currentHeading~0); 1116321#L2682-36 assume !(0 == ~currentFloorID~0); 1116231#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1067921#L2688-25 assume { :end_inline_continueInDirection } true; 1067889#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1119176#L1436-4 assume !(-1 == ~expectedDirection~0); 1119172#L1448-4 assume !(1 == ~expectedDirection~0); 1119170#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1119148#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 1119146#L188-3 [2018-11-18 11:17:39,623 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:39,623 INFO L82 PathProgramCache]: Analyzing trace with hash 1105140296, now seen corresponding path program 2 times [2018-11-18 11:17:39,623 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:39,623 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:39,623 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:39,623 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:17:39,624 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:39,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:40,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:40,453 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:40,453 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 11:17:40,453 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:17:40,453 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:17:40,453 INFO L82 PathProgramCache]: Analyzing trace with hash -492562806, now seen corresponding path program 1 times [2018-11-18 11:17:40,453 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:17:40,454 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:17:40,454 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:40,454 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:17:40,454 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:17:40,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:17:40,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:17:40,488 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:17:40,488 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 11:17:40,488 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:17:40,488 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 11:17:40,488 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-18 11:17:40,488 INFO L87 Difference]: Start difference. First operand 64113 states and 117547 transitions. cyclomatic complexity: 53435 Second operand 7 states. [2018-11-18 11:17:48,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:17:48,115 INFO L93 Difference]: Finished difference Result 260399 states and 480219 transitions. [2018-11-18 11:17:48,115 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-18 11:17:48,115 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 260399 states and 480219 transitions. [2018-11-18 11:17:48,735 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 75372 [2018-11-18 11:17:49,236 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 260399 states to 260399 states and 480219 transitions. [2018-11-18 11:17:49,236 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 260399 [2018-11-18 11:17:49,360 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 260399 [2018-11-18 11:17:49,360 INFO L73 IsDeterministic]: Start isDeterministic. Operand 260399 states and 480219 transitions. [2018-11-18 11:17:49,457 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:17:49,457 INFO L705 BuchiCegarLoop]: Abstraction has 260399 states and 480219 transitions. [2018-11-18 11:17:49,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260399 states and 480219 transitions. [2018-11-18 11:17:50,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260399 to 64131. [2018-11-18 11:17:50,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 64131 states. [2018-11-18 11:17:50,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64131 states to 64131 states and 117536 transitions. [2018-11-18 11:17:50,319 INFO L728 BuchiCegarLoop]: Abstraction has 64131 states and 117536 transitions. [2018-11-18 11:17:50,319 INFO L608 BuchiCegarLoop]: Abstraction has 64131 states and 117536 transitions. [2018-11-18 11:17:50,319 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-18 11:17:50,319 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64131 states and 117536 transitions. [2018-11-18 11:17:50,427 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15412 [2018-11-18 11:17:50,427 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:17:50,427 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:17:50,431 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:50,431 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:17:50,431 INFO L794 eck$LassoCheckResult]: Stem: 1393969#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1393970#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 1395751#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1395951#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1395952#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1394770#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 1394771#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1391840#L692 assume { :end_inline_initFloors } true; 1391687#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1391688#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1393614#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1394797#L970 assume 0 == initPersonOnFloor_~floor; 1395508#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1390609#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1393373#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1390389#L774-2 assume { :end_inline_callOnFloor } true; 1390390#L1114 assume { :end_inline_initPersonOnFloor } true; 1393394#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1391179#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1391180#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1390471#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1390472#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1396089#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1395609#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1392204#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1390526#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1391681#L699 assume !(0 == isFloorCalling_~floorID); 1391682#L703 assume !(1 == isFloorCalling_~floorID); 1395703#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1394066#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1391478#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1391479#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1395955#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1395184#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1390414#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1390416#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1396899#L2854 assume !(0 != timeShift_~tmp___9~3); 1394385#L2945 assume !(1 == ~doorState~0); 1394386#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1394388#L2296 assume !(1 == stopRequestedInDirection_~dir); 1395219#L2465 assume !(0 == ~currentFloorID~0); 1395379#L2471 assume ~currentFloorID~0 > 0; 1395380#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1391672#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1391673#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1394050#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1390658#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1401667#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1394897#L2672 assume !(1 == ~currentHeading~0); 1393016#L2682 assume !(0 == ~currentFloorID~0); 1392998#L2682-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1392321#L2688-1 assume { :end_inline_continueInDirection } true; 1392315#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1393413#L1436 assume !(-1 == ~expectedDirection~0); 1393580#L1448 assume !(1 == ~expectedDirection~0); 1392802#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1390329#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1390330#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1391178#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1390483#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1390485#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1392310#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1395161#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1392168#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1392170#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1396107#L699-21 assume !(0 == isFloorCalling_~floorID); 1396108#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1414972#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1414969#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1396045#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1396046#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1414971#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1414970#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1414968#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1414965#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1412980#L2945-3 assume !(1 == ~doorState~0); 1416905#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1396935#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1396936#L2465-2 assume !(0 == ~currentFloorID~0); 1395407#L2471-2 assume ~currentFloorID~0 > 0; 1395408#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1396095#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1393933#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1393934#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1390630#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1417172#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1394886#L2672-3 assume !(1 == ~currentHeading~0); 1392985#L2682-9 assume !(0 == ~currentFloorID~0); 1392986#L2682-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1392988#L2688-7 assume { :end_inline_continueInDirection } true; 1417532#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1417530#L1436-1 assume !(-1 == ~expectedDirection~0); 1417523#L1448-1 assume !(1 == ~expectedDirection~0); 1417521#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1417515#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1417484#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1417483#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1417475#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1417462#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1417422#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1417416#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1417402#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1417396#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1417395#L699-42 assume !(0 == isFloorCalling_~floorID); 1417393#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1417390#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1417389#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1417388#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1417386#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1417383#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1417381#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1417259#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1417241#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1416999#L2945-6 assume !(1 == ~doorState~0); 1417000#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1396932#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1396933#L2465-4 assume !(0 == ~currentFloorID~0); 1395337#L2471-4 assume ~currentFloorID~0 > 0; 1395338#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1396032#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1396033#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1417237#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1434625#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1434623#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1434615#L2672-6 assume !(1 == ~currentHeading~0); 1434613#L2682-18 assume !(0 == ~currentFloorID~0); 1434609#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1434610#L2688-13 assume { :end_inline_continueInDirection } true; 1434820#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1434817#L1436-2 assume !(-1 == ~expectedDirection~0); 1434815#L1448-2 assume !(1 == ~expectedDirection~0); 1434813#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1434626#L2977-2 assume { :end_inline_timeShift } true; 1434624#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1434622#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1434614#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1434611#L970-1 assume 0 == initPersonOnFloor_~floor; 1434430#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1434412#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1434408#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1428370#L774-5 assume { :end_inline_callOnFloor } true; 1434400#L1114-1 assume { :end_inline_initPersonOnFloor } true; 1434398#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1434396#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1434394#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1434391#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1434392#L1306-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1396018#L2109-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1394169#L2130-33 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1391895#L1310-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1391896#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1427925#L699-63 assume !(0 == isFloorCalling_~floorID); 1422562#L703-63 assume !(1 == isFloorCalling_~floorID); 1427924#L707-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1427915#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1427908#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1426533#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1422888#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1422884#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1422879#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1422877#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1422874#L2854-6 assume !(0 != timeShift_~tmp___9~3); 1422866#L2945-9 assume !(1 == ~doorState~0); 1421883#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1421872#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1417335#L2465-6 assume !(0 == ~currentFloorID~0); 1417098#L2471-6 assume !(~currentFloorID~0 > 0); 1417099#L2486-6 assume ~currentFloorID~0 > 0; 1393981#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1393982#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1390652#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1391146#L2953-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1394872#L2672-9 assume !(1 == ~currentHeading~0); 1392909#L2682-27 assume !(0 == ~currentFloorID~0); 1392910#L2682-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1454215#L2688-19 assume { :end_inline_continueInDirection } true; 1392228#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1454211#L1436-3 assume !(-1 == ~expectedDirection~0); 1394357#L1448-3 assume !(1 == ~expectedDirection~0); 1392729#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1390311#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 1390312#L188-3 WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [2018-11-18 11:21:40,408 INFO L796 eck$LassoCheckResult]: Loop: 10305744#L188-3 assume true; 10305740#L188-1 assume !false; 10305736#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 10305732#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 10305726#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 10305718#L196 assume 1 != cleanup_~tmp___0~0; 10305710#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10305700#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10305690#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 10305682#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 10296668#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 10305676#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 10305672#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 10305668#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10305664#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 10305660#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 10305656#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 10305652#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 10226193#L1327-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10302230#L2109-46 assume !(0 == buttonForFloorIsPressed_~floorID); 10302229#L2113-46 assume !(1 == buttonForFloorIsPressed_~floorID); 10302228#L2117-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10302227#L2130-46 __utac_acc__Specification3_spec__1_#t~ret24 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___2~1 := __utac_acc__Specification3_spec__1_#t~ret24;havoc __utac_acc__Specification3_spec__1_#t~ret24; 10302225#L1332-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~1;~expectedDirection~0 := 1; 10302221#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10302219#L699-89 assume !(0 == isFloorCalling_~floorID); 10302217#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10302215#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 10302214#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10302213#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 10302210#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10302208#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 10302206#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 10302205#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 10302199#L2854-8 assume !(0 != timeShift_~tmp___9~3); 10058775#L2945-12 assume !(1 == ~doorState~0); 10058749#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 10058750#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 10060222#L2465-8 assume !(0 == ~currentFloorID~0); 10059862#L2471-8 assume ~currentFloorID~0 > 0; 10059716#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10059717#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10060510#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 10234452#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 10057999#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 10234441#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 10235757#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 10235755#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 10235720#L2676-36 assume !(0 != continueInDirection_~tmp~19); 10235721#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10305800#L2688-25 assume { :end_inline_continueInDirection } true; 10305796#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 10305793#L1436-4 assume !(-1 == ~expectedDirection~0); 10305790#L1448-4 assume !(1 == ~expectedDirection~0); 10305758#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 10305750#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 10305744#L188-3 [2018-11-18 11:21:40,414 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:21:40,414 INFO L82 PathProgramCache]: Analyzing trace with hash -1981027575, now seen corresponding path program 2 times [2018-11-18 11:21:40,415 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:21:40,415 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:21:40,415 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:40,416 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:21:40,416 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:40,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:21:41,185 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:21:41,185 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:21:41,185 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:21:41,185 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:21:41,186 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:21:41,186 INFO L82 PathProgramCache]: Analyzing trace with hash 139820367, now seen corresponding path program 1 times [2018-11-18 11:21:41,186 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:21:41,186 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:21:41,186 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:41,186 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:21:41,186 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:41,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:21:41,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:21:41,243 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:21:41,243 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 11:21:41,243 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:21:41,244 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 11:21:41,244 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 11:21:41,244 INFO L87 Difference]: Start difference. First operand 265797 states and 487088 transitions. cyclomatic complexity: 221310 Second operand 6 states. [2018-11-18 11:21:47,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:21:47,109 INFO L93 Difference]: Finished difference Result 515496 states and 947710 transitions. [2018-11-18 11:21:47,109 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-18 11:21:47,109 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 515496 states and 947710 transitions. [2018-11-18 11:21:49,551 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 146514 [2018-11-18 11:21:50,600 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 515496 states to 515496 states and 947710 transitions. [2018-11-18 11:21:50,600 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 486482 [2018-11-18 11:21:50,889 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 486482 [2018-11-18 11:21:50,889 INFO L73 IsDeterministic]: Start isDeterministic. Operand 515496 states and 947710 transitions. [2018-11-18 11:21:50,922 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:21:50,922 INFO L705 BuchiCegarLoop]: Abstraction has 515496 states and 947710 transitions. [2018-11-18 11:21:51,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 515496 states and 947710 transitions. [2018-11-18 11:21:54,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 515496 to 264580. [2018-11-18 11:21:54,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 264580 states. [2018-11-18 11:21:55,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264580 states to 264580 states and 485226 transitions. [2018-11-18 11:21:55,723 INFO L728 BuchiCegarLoop]: Abstraction has 264580 states and 485226 transitions. [2018-11-18 11:21:55,723 INFO L608 BuchiCegarLoop]: Abstraction has 264580 states and 485226 transitions. [2018-11-18 11:21:55,723 INFO L442 BuchiCegarLoop]: ======== Iteration 24============ [2018-11-18 11:21:55,723 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 264580 states and 485226 transitions. [2018-11-18 11:21:56,140 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 73910 [2018-11-18 11:21:56,141 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:21:56,141 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:21:56,143 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:21:56,143 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:21:56,143 INFO L794 eck$LassoCheckResult]: Stem: 10839792#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 10839793#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 10841908#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 10842083#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 10842084#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 10840805#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 10840806#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 10837215#L692 assume { :end_inline_initFloors } true; 10837018#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 10837019#L444 assume !(0 == getOrigin_~person); 10841181#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 10839372#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 10843121#L970 assume 0 == initPersonOnFloor_~floor; 10841877#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 10835738#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 10839069#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 10835498#L774-2 assume { :end_inline_callOnFloor } true; 10835499#L1114 assume { :end_inline_initPersonOnFloor } true; 10842316#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 10842317#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10840943#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 10840944#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 10837755#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10837756#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10842432#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 10842433#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 10836976#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10841532#L699 assume !(0 == isFloorCalling_~floorID); 10841967#L703 assume !(1 == isFloorCalling_~floorID); 10841968#L707 assume !(2 == isFloorCalling_~floorID); 10843057#L711 assume !(3 == isFloorCalling_~floorID); 10843058#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10839905#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 10839906#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10842178#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 10842179#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10842418#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 10842419#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 10848624#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 10848625#L2854 assume !(0 != timeShift_~tmp___9~3); 10840293#L2945 assume !(1 == ~doorState~0); 10840294#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 10841287#L2296 assume !(1 == stopRequestedInDirection_~dir); 10841288#L2465 assume !(0 == ~currentFloorID~0); 10841484#L2471 assume ~currentFloorID~0 > 0; 10841485#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10837000#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10837001#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 10839884#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 10876452#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 10876453#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 10840972#L2672 assume !(1 == ~currentHeading~0); 10838606#L2682 assume !(0 == ~currentFloorID~0); 10838588#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10837771#L2688-1 assume { :end_inline_continueInDirection } true; 10837766#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 10880408#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10877049#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 10880310#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 10875543#L1448 assume !(1 == ~expectedDirection~0); 10875529#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 10875405#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 10870998#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10870997#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 10870996#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 10870994#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10870995#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10923541#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 10923539#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 10923537#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10923532#L699-21 assume !(0 == isFloorCalling_~floorID); 10923493#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10923494#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 10932667#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10932668#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 10932676#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10932672#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 10932669#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 10932665#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 10932648#L2854-2 assume !(0 != timeShift_~tmp___9~3); 10840283#L2945-3 assume !(1 == ~doorState~0); 10840284#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 10840288#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 10841293#L2465-2 assume !(0 == ~currentFloorID~0); 10841520#L2471-2 assume ~currentFloorID~0 > 0; 10841337#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10841338#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10842196#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 10878764#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 10878750#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 10878751#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 10879147#L2672-3 assume !(1 == ~currentHeading~0); 10879143#L2682-9 assume !(0 == ~currentFloorID~0); 10879138#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10879135#L2688-7 assume { :end_inline_continueInDirection } true; 10879132#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 10879131#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10878945#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 10879130#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 10878941#L1448-1 assume !(1 == ~expectedDirection~0); 10878939#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 10871889#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 10868881#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10868879#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 10868877#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 10868874#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10868875#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10933462#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 10933460#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 10933459#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10933458#L699-42 assume !(0 == isFloorCalling_~floorID); 10933456#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10933453#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 10933452#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10933451#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 10933449#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10933446#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 10933444#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 10933438#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 10933436#L2854-4 assume !(0 != timeShift_~tmp___9~3); 10880689#L2945-6 assume !(1 == ~doorState~0); 10880686#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 10880684#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 10880683#L2465-4 assume !(0 == ~currentFloorID~0); 10880681#L2471-4 assume ~currentFloorID~0 > 0; 10880679#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 10880675#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 10880666#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 10880667#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 10880708#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 10896443#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 10896441#L2672-6 assume !(1 == ~currentHeading~0); 10896438#L2682-18 assume !(0 == ~currentFloorID~0); 10896436#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10896227#L2688-13 assume { :end_inline_continueInDirection } true; 10896224#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 10895353#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10895352#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 10895351#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 10894151#L1448-2 assume !(1 == ~expectedDirection~0); 10894147#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 10894145#L2977-2 assume { :end_inline_timeShift } true; 10894143#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 10894141#L444-1 assume !(0 == getOrigin_~person); 10879256#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 10879252#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 10879250#L970-1 assume 0 == initPersonOnFloor_~floor; 10878923#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 10878905#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 10878869#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 10878850#L774-5 assume { :end_inline_callOnFloor } true; 10878848#L1114-1 assume { :end_inline_initPersonOnFloor } true; 10871440#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 10868837#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 10856336#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 10856337#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 10856322#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 10856324#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 10926848#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 10926844#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 10926845#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11047348#L699-63 assume !(0 == isFloorCalling_~floorID); 11047344#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11047345#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 11049474#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11049473#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 11049471#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11049468#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 11049466#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 11049465#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 11049464#L2854-6 assume !(0 != timeShift_~tmp___9~3); 10894666#L2945-9 assume !(1 == ~doorState~0); 10894657#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 10894655#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 10894656#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 10895361#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 10895354#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 10894638#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 10894636#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 10894637#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 10896421#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 10896420#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 10896356#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 10896347#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 10896345#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 10896346#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 10896344#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 10896341#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 10896342#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 10896337#L2676-30 assume !(0 != continueInDirection_~tmp~19); 10896338#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11022601#L2688-21 assume { :end_inline_continueInDirection } true; 11022600#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 11022599#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11022557#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 11022598#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 11022549#L1448-3 assume !(1 == ~expectedDirection~0); 11022547#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 11022546#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 11022543#L188-3 [2018-11-18 11:21:56,161 INFO L796 eck$LassoCheckResult]: Loop: 11022543#L188-3 assume true; 11022541#L188-1 assume !false; 11022540#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 11022537#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 11022535#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 11022534#L196 assume 1 != cleanup_~tmp___0~0; 11022533#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11022531#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11022532#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 11022499#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 11022493#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 11022491#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 11022489#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 11013108#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11013109#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 11013089#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 11013090#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 11013045#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 10984998#L1327-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11012984#L2109-46 assume !(0 == buttonForFloorIsPressed_~floorID); 11012178#L2113-46 assume !(1 == buttonForFloorIsPressed_~floorID); 11012173#L2117-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11012171#L2130-46 __utac_acc__Specification3_spec__1_#t~ret24 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___2~1 := __utac_acc__Specification3_spec__1_#t~ret24;havoc __utac_acc__Specification3_spec__1_#t~ret24; 11012169#L1332-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~1;~expectedDirection~0 := 1; 11012165#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11012163#L699-89 assume !(0 == isFloorCalling_~floorID); 11012161#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11012159#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 11012155#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11012156#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 11012980#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11012947#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 11012157#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 11012158#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 11012146#L2854-8 assume !(0 != timeShift_~tmp___9~3); 10984764#L2945-12 assume !(1 == ~doorState~0); 10992536#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 10984696#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 10984697#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 10984675#L2300-8 assume !(0 != stopRequestedInDirection_~tmp~18); 10984676#L2306-8 assume !(~currentFloorID~0 < 0); 10984899#L2321-8 assume !(~currentFloorID~0 < 0); 10984900#L2334-8 assume !(~currentFloorID~0 < 1); 10992521#L2350-8 assume !(~currentFloorID~0 < 1); 10992511#L2363-8 assume !(~currentFloorID~0 < 2); 10984674#L2379-8 assume ~currentFloorID~0 < 2; 10992527#L2381-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 10984671#L2382-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 10984664#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 10992522#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 10997954#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 11022573#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 11022571#L2676-36 assume !(0 != continueInDirection_~tmp~19); 11022569#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11022568#L2688-25 assume { :end_inline_continueInDirection } true; 11022565#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 11022560#L1436-4 assume !(-1 == ~expectedDirection~0); 11022558#L1448-4 assume !(1 == ~expectedDirection~0); 11022550#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 11022545#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 11022543#L188-3 [2018-11-18 11:21:56,169 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:21:56,170 INFO L82 PathProgramCache]: Analyzing trace with hash -1333333482, now seen corresponding path program 1 times [2018-11-18 11:21:56,170 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:21:56,170 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:21:56,171 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:56,172 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:21:56,172 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:56,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:21:56,955 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:21:56,955 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:21:56,956 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:21:56,956 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:21:56,956 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:21:56,956 INFO L82 PathProgramCache]: Analyzing trace with hash 372267555, now seen corresponding path program 1 times [2018-11-18 11:21:56,956 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:21:56,956 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:21:56,957 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:56,957 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:21:56,957 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:21:56,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:21:57,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:21:57,021 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:21:57,021 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:21:57,021 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:21:57,022 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:21:57,022 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:21:57,022 INFO L87 Difference]: Start difference. First operand 264580 states and 485226 transitions. cyclomatic complexity: 220665 Second operand 5 states. [2018-11-18 11:22:00,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:22:00,791 INFO L93 Difference]: Finished difference Result 321064 states and 585454 transitions. [2018-11-18 11:22:00,791 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 11:22:00,791 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 321064 states and 585454 transitions. [2018-11-18 11:22:01,586 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 88082 [2018-11-18 11:22:02,218 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 321064 states to 321064 states and 585454 transitions. [2018-11-18 11:22:02,218 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 306406 [2018-11-18 11:22:02,381 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 306406 [2018-11-18 11:22:02,381 INFO L73 IsDeterministic]: Start isDeterministic. Operand 321064 states and 585454 transitions. [2018-11-18 11:22:02,447 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:22:02,447 INFO L705 BuchiCegarLoop]: Abstraction has 321064 states and 585454 transitions. [2018-11-18 11:22:02,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321064 states and 585454 transitions. [2018-11-18 11:22:04,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321064 to 320828. [2018-11-18 11:22:04,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 320828 states. [2018-11-18 11:22:06,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320828 states to 320828 states and 585182 transitions. [2018-11-18 11:22:06,126 INFO L728 BuchiCegarLoop]: Abstraction has 320828 states and 585182 transitions. [2018-11-18 11:22:06,126 INFO L608 BuchiCegarLoop]: Abstraction has 320828 states and 585182 transitions. [2018-11-18 11:22:06,126 INFO L442 BuchiCegarLoop]: ======== Iteration 25============ [2018-11-18 11:22:06,126 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 320828 states and 585182 transitions. [2018-11-18 11:22:06,616 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 88062 [2018-11-18 11:22:06,616 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:22:06,616 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:22:06,619 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:22:06,620 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:22:06,620 INFO L794 eck$LassoCheckResult]: Stem: 11425362#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 11425363#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 11427362#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 11427503#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 11427504#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 11426340#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 11426341#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 11422857#L692 assume { :end_inline_initFloors } true; 11422654#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 11422655#L444 assume !(0 == getOrigin_~person); 11426692#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 11424957#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 11428370#L970 assume 0 == initPersonOnFloor_~floor; 11427332#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 11421399#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 11424654#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 11421149#L774-2 assume { :end_inline_callOnFloor } true; 11421150#L1114 assume { :end_inline_initPersonOnFloor } true; 11424675#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 11422064#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11422065#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 11421252#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 11421253#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11423375#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11427572#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 11459957#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 11421308#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11422646#L699 assume !(0 == isFloorCalling_~floorID); 11422647#L703 assume !(1 == isFloorCalling_~floorID); 11427313#L707 assume !(2 == isFloorCalling_~floorID); 11427314#L711 assume !(3 == isFloorCalling_~floorID); 11428326#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11425466#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 11422413#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11422414#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 11427507#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11426765#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 11421180#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 11421182#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 11474221#L2854 assume !(0 != timeShift_~tmp___9~3); 11425861#L2945 assume !(1 == ~doorState~0); 11425862#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 11425864#L2296 assume !(1 == stopRequestedInDirection_~dir); 11426798#L2465 assume !(0 == ~currentFloorID~0); 11426983#L2471 assume ~currentFloorID~0 > 0; 11426841#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11422634#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11422635#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 11472706#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 11472654#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 11472655#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 11426487#L2672 assume !(1 == ~currentHeading~0); 11424214#L2682 assume !(0 == ~currentFloorID~0); 11424198#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11423391#L2688-1 assume { :end_inline_continueInDirection } true; 11423385#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 11424694#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11470799#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 11500871#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 11470790#L1448 assume !(1 == ~expectedDirection~0); 11470786#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 11470785#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 11470686#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11470675#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 11470658#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 11455865#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11455866#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11466742#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 11466710#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 11466712#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11521686#L699-21 assume !(0 == isFloorCalling_~floorID); 11521685#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11521681#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 11521680#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11521679#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 11521678#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11521674#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 11521672#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 11521671#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 11521670#L2854-2 assume !(0 != timeShift_~tmp___9~3); 11473473#L2945-3 assume !(1 == ~doorState~0); 11473471#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 11473469#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 11473467#L2465-2 assume !(0 == ~currentFloorID~0); 11473464#L2471-2 assume ~currentFloorID~0 > 0; 11473462#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11473458#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11473459#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 11473719#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 11473713#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 11474347#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 11473703#L2672-3 assume !(1 == ~currentHeading~0); 11473701#L2682-9 assume !(0 == ~currentFloorID~0); 11473699#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11473697#L2688-7 assume { :end_inline_continueInDirection } true; 11473694#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 11473691#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11458773#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 11473689#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 11458754#L1448-1 assume !(1 == ~expectedDirection~0); 11458750#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 11458748#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 11458746#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11458550#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 11458536#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 11456856#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11456857#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11501723#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 11501720#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 11501721#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11505529#L699-42 assume !(0 == isFloorCalling_~floorID); 11505527#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11505524#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 11505523#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11505522#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 11505520#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11505517#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 11505515#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 11505509#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 11505506#L2854-4 assume !(0 != timeShift_~tmp___9~3); 11498290#L2945-6 assume !(1 == ~doorState~0); 11498288#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 11498285#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 11498282#L2465-4 assume !(0 == ~currentFloorID~0); 11498280#L2471-4 assume ~currentFloorID~0 > 0; 11498277#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11498273#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11498269#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 11498258#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 11498183#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 11498758#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 11498759#L2672-6 assume !(1 == ~currentHeading~0); 11570750#L2682-18 assume !(0 == ~currentFloorID~0); 11570749#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11570741#L2688-13 assume { :end_inline_continueInDirection } true; 11570739#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 11570738#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11570690#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 11570737#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 11570686#L1448-2 assume !(1 == ~expectedDirection~0); 11570684#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 11570683#L2977-2 assume { :end_inline_timeShift } true; 11570682#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 11570680#L444-1 assume !(0 == getOrigin_~person); 11570681#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 11570761#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 11570760#L970-1 assume 0 == initPersonOnFloor_~floor; 11570659#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 11570642#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 11570639#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 11458467#L774-5 assume { :end_inline_callOnFloor } true; 11570631#L1114-1 assume { :end_inline_initPersonOnFloor } true; 11570629#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 11570627#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11570625#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 11570623#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 11570621#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11570618#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11570616#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 11570613#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 11570614#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11597812#L699-63 assume !(0 == isFloorCalling_~floorID); 11597393#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11597390#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 11597342#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11597341#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 11597337#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11597329#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 11597327#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 11597326#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 11501529#L2854-6 assume !(0 != timeShift_~tmp___9~3); 11501528#L2945-9 assume !(1 == ~doorState~0); 11501527#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 11501494#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 11501492#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 11501488#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 11501384#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 11581121#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 11581115#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 11581111#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 11581104#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 11581103#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 11581101#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 11581021#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 11636156#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 11636155#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 11636154#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 11636152#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 11636153#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 11636150#L2676-30 assume !(0 != continueInDirection_~tmp~19); 11581228#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11607746#L2688-21 assume { :end_inline_continueInDirection } true; 11607744#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 11607736#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11607729#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 11607727#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 11607717#L1448-3 assume !(1 == ~expectedDirection~0); 11607713#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 11607711#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 11607709#L188-3 [2018-11-18 11:22:06,635 INFO L796 eck$LassoCheckResult]: Loop: 11607709#L188-3 assume true; 11607708#L188-1 assume !false; 11607707#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 11607706#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 11607705#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 11607704#L196 assume 1 != cleanup_~tmp___0~0; 11607703#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11607700#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11607701#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 11632830#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 11632825#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 11632823#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 11632821#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 11632792#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 11632784#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 11632776#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 11632762#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 11606815#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 11606811#L1327-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 11606806#L1338-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 11606771#L1349-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 11606772#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 11608982#L699-89 assume !(0 == isFloorCalling_~floorID); 11608375#L703-89 assume !(1 == isFloorCalling_~floorID); 11608138#L707-89 assume !(2 == isFloorCalling_~floorID); 11608137#L711-89 assume !(3 == isFloorCalling_~floorID); 11608028#L715-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 11607993#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 11607981#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 11607976#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 11607969#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 11607961#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 11607954#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 11607950#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 11607937#L2854-8 assume !(0 != timeShift_~tmp___9~3); 11607925#L2945-12 assume !(1 == ~doorState~0); 11607924#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 11607922#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 11607921#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 11607920#L2300-8 assume !(0 != stopRequestedInDirection_~tmp~18); 11607919#L2306-8 assume !(~currentFloorID~0 < 0); 11607918#L2321-8 assume !(~currentFloorID~0 < 0); 11607916#L2334-8 assume !(~currentFloorID~0 < 1); 11607914#L2350-8 assume !(~currentFloorID~0 < 1); 11607911#L2363-8 assume !(~currentFloorID~0 < 2); 11607910#L2379-8 assume ~currentFloorID~0 < 2; 11607895#L2381-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 11607879#L2382-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 11607864#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 11607853#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 11607790#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 11607791#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 11607754#L2676-36 assume !(0 != continueInDirection_~tmp~19); 11607743#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11607735#L2688-25 assume { :end_inline_continueInDirection } true; 11607730#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 11607725#L1436-4 assume !(-1 == ~expectedDirection~0); 11607720#L1448-4 assume !(1 == ~expectedDirection~0); 11607712#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 11607710#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 11607709#L188-3 [2018-11-18 11:22:06,642 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:22:06,642 INFO L82 PathProgramCache]: Analyzing trace with hash -1333333482, now seen corresponding path program 2 times [2018-11-18 11:22:06,642 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:22:06,642 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:22:06,643 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:06,643 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:22:06,643 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:06,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:22:07,408 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:22:07,408 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:22:07,408 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:22:07,408 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:22:07,409 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:22:07,409 INFO L82 PathProgramCache]: Analyzing trace with hash 631308701, now seen corresponding path program 1 times [2018-11-18 11:22:07,409 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:22:07,409 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:22:07,409 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:07,409 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:22:07,410 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:07,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:22:07,424 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:22:07,424 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:22:07,424 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:22:07,425 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:22:07,425 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:22:07,425 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:22:07,425 INFO L87 Difference]: Start difference. First operand 320828 states and 585182 transitions. cyclomatic complexity: 264373 Second operand 5 states. [2018-11-18 11:22:17,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:22:17,211 INFO L93 Difference]: Finished difference Result 615931 states and 1117466 transitions. [2018-11-18 11:22:17,211 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 11:22:17,212 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 615931 states and 1117466 transitions. [2018-11-18 11:22:19,083 INFO L131 ngComponentsAnalysis]: Automaton has 17 accepting balls. 174089 [2018-11-18 11:22:20,952 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 615931 states to 615931 states and 1117466 transitions. [2018-11-18 11:22:20,952 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 588378 [2018-11-18 11:22:21,259 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 588378 [2018-11-18 11:22:21,259 INFO L73 IsDeterministic]: Start isDeterministic. Operand 615931 states and 1117466 transitions. [2018-11-18 11:22:21,370 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:22:21,370 INFO L705 BuchiCegarLoop]: Abstraction has 615931 states and 1117466 transitions. [2018-11-18 11:22:21,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 615931 states and 1117466 transitions. [2018-11-18 11:22:24,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 615931 to 336024. [2018-11-18 11:22:24,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 336024 states. [2018-11-18 11:22:24,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336024 states to 336024 states and 613164 transitions. [2018-11-18 11:22:24,642 INFO L728 BuchiCegarLoop]: Abstraction has 336024 states and 613164 transitions. [2018-11-18 11:22:24,642 INFO L608 BuchiCegarLoop]: Abstraction has 336024 states and 613164 transitions. [2018-11-18 11:22:24,642 INFO L442 BuchiCegarLoop]: ======== Iteration 26============ [2018-11-18 11:22:24,642 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 336024 states and 613164 transitions. [2018-11-18 11:22:26,063 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 91162 [2018-11-18 11:22:26,063 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:22:26,063 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:22:26,066 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:22:26,066 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:22:26,067 INFO L794 eck$LassoCheckResult]: Stem: 12362193#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 12362194#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 12364231#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 12364405#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 12364406#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 12363187#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 12363188#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 12359650#L692 assume { :end_inline_initFloors } true; 12359445#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 12359446#L444 assume !(0 == getOrigin_~person); 12363553#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 12361773#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 12365439#L970 assume 0 == initPersonOnFloor_~floor; 12364195#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 12358180#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 12361462#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 12357929#L774-2 assume { :end_inline_callOnFloor } true; 12357930#L1114 assume { :end_inline_initPersonOnFloor } true; 12364624#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 12364625#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12363310#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 12363311#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 12360178#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12360179#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12364759#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 12364760#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 12358089#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12359437#L699 assume !(0 == isFloorCalling_~floorID); 12359438#L703 assume !(1 == isFloorCalling_~floorID); 12364175#L707 assume !(2 == isFloorCalling_~floorID); 12364176#L711 assume !(3 == isFloorCalling_~floorID); 12365341#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12362301#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 12359205#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12359206#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 12364410#L2113-10 assume !(1 == buttonForFloorIsPressed_~floorID); 12363623#L2117-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12363624#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 12357960#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 12357962#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 12399399#L2854 assume !(0 != timeShift_~tmp___9~3); 12362709#L2945 assume !(1 == ~doorState~0); 12362710#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 12362712#L2296 assume !(1 == stopRequestedInDirection_~dir); 12363658#L2465 assume !(0 == ~currentFloorID~0); 12363848#L2471 assume ~currentFloorID~0 > 0; 12363701#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12359425#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12359426#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 12362279#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 12362662#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 12402481#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 12413508#L2672 assume !(1 == ~currentHeading~0); 12429392#L2682 assume !(0 == ~currentFloorID~0); 12429391#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12394680#L2688-1 assume { :end_inline_continueInDirection } true; 12394678#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 12394670#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12394358#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 12394660#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 12394661#L1448 assume !(1 == ~expectedDirection~0); 12394299#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 12394300#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 12394281#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12394282#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 12394267#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 12394268#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12429387#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12429386#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 12429384#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 12429385#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12485668#L699-21 assume !(0 == isFloorCalling_~floorID); 12485666#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12485665#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 12485663#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12485664#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 12485673#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12485669#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 12485661#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 12485662#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 12498969#L2854-2 assume !(0 != timeShift_~tmp___9~3); 12498967#L2945-3 assume !(1 == ~doorState~0); 12498966#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 12498964#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 12498965#L2465-2 assume !(0 == ~currentFloorID~0); 12498995#L2471-2 assume ~currentFloorID~0 > 0; 12498993#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12498990#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12498989#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 12498285#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 12498277#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 12498275#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 12498274#L2672-3 assume !(1 == ~currentHeading~0); 12498273#L2682-9 assume !(0 == ~currentFloorID~0); 12413524#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12413522#L2688-7 assume { :end_inline_continueInDirection } true; 12413520#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 12413512#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12413513#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 12449108#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 12449099#L1448-1 assume !(1 == ~expectedDirection~0); 12449095#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 12449094#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 12449093#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12449092#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 12449091#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 12449059#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12449056#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12449054#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 12449039#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 12449040#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12508095#L699-42 assume !(0 == isFloorCalling_~floorID); 12508096#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12529660#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 12512977#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12512979#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 12527443#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12527440#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 12512980#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 12512975#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 12512976#L2854-4 assume !(0 != timeShift_~tmp___9~3); 12521830#L2945-6 assume !(1 == ~doorState~0); 12521829#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 12521828#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 12364238#L2465-4 assume !(0 == ~currentFloorID~0); 12363806#L2471-4 assume ~currentFloorID~0 > 0; 12363649#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12363650#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12361844#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 12361845#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 12358206#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 12529771#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 12363340#L2672-6 assume !(1 == ~currentHeading~0); 12360925#L2682-18 assume !(0 == ~currentFloorID~0); 12360926#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 12507000#L2688-13 assume { :end_inline_continueInDirection } true; 12506997#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 12500557#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12500556#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 12500555#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 12500554#L1448-2 assume !(1 == ~expectedDirection~0); 12500550#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 12500549#L2977-2 assume { :end_inline_timeShift } true; 12500548#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 12500546#L444-1 assume !(0 == getOrigin_~person); 12500547#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 12507017#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 12507016#L970-1 assume 0 == initPersonOnFloor_~floor; 12500525#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 12500508#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 12500505#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 12429725#L774-5 assume { :end_inline_callOnFloor } true; 12500502#L1114-1 assume { :end_inline_initPersonOnFloor } true; 12500500#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 12500498#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12500497#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 12500495#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 12500492#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12500493#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12502718#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 12502716#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 12502717#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12545325#L699-63 assume !(0 == isFloorCalling_~floorID); 12545323#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12545322#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 12545320#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12545319#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 12545315#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12545316#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 12548184#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 12548178#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 12548171#L2854-6 assume !(0 != timeShift_~tmp___9~3); 12538826#L2945-9 assume !(1 == ~doorState~0); 12538827#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 12538821#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 12538823#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 12545483#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 12545481#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 12545479#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 12545476#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 12545477#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 12546536#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 12546533#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 12546419#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 12546414#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 12546231#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 12546226#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 12546227#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 12546214#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 12546211#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 12546212#L2676-30 assume !(0 != continueInDirection_~tmp~19); 12545390#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 12555010#L2688-21 assume { :end_inline_continueInDirection } true; 12555007#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 12555004#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12554936#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 12554970#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 12554925#L1448-3 assume !(1 == ~expectedDirection~0); 12554922#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 12554920#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 12554917#L188-3 [2018-11-18 11:22:26,082 INFO L796 eck$LassoCheckResult]: Loop: 12554917#L188-3 assume true; 12554915#L188-1 assume !false; 12554913#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 12554912#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 12554911#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 12554910#L196 assume 1 != cleanup_~tmp___0~0; 12554908#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12554905#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12554904#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 12554880#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 12554873#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 12554870#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 12554867#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 12554864#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 12554861#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 12554858#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 12554854#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 12554193#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 12548623#L1327-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 12548625#L1338-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 12548622#L1349-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 12548621#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 12567812#L699-89 assume !(0 == isFloorCalling_~floorID); 12554712#L703-89 assume !(1 == isFloorCalling_~floorID); 12554696#L707-89 assume !(2 == isFloorCalling_~floorID); 12554692#L711-89 assume !(3 == isFloorCalling_~floorID); 12548583#L715-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 12548584#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 12548575#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 12548572#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 12548573#L2113-54 assume !(1 == buttonForFloorIsPressed_~floorID); 12548564#L2117-54 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 12548563#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 12548555#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 12548553#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 12548429#L2854-8 assume !(0 != timeShift_~tmp___9~3); 12548428#L2945-12 assume !(1 == ~doorState~0); 12548427#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 12548426#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 12548425#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 12548424#L2300-8 assume !(0 != stopRequestedInDirection_~tmp~18); 12548423#L2306-8 assume !(~currentFloorID~0 < 0); 12548422#L2321-8 assume !(~currentFloorID~0 < 0); 12548421#L2334-8 assume !(~currentFloorID~0 < 1); 12548420#L2350-8 assume !(~currentFloorID~0 < 1); 12548418#L2363-8 assume !(~currentFloorID~0 < 2); 12548416#L2379-8 assume ~currentFloorID~0 < 2; 12548417#L2381-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 12582714#L2382-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 12582114#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 12582035#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 12582028#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 12581981#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 12555434#L2676-36 assume !(0 != continueInDirection_~tmp~19); 12548281#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 12555150#L2688-25 assume { :end_inline_continueInDirection } true; 12555145#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 12555141#L1436-4 assume !(-1 == ~expectedDirection~0); 12555138#L1448-4 assume !(1 == ~expectedDirection~0); 12554975#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 12554919#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 12554917#L188-3 [2018-11-18 11:22:26,090 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:22:26,090 INFO L82 PathProgramCache]: Analyzing trace with hash 1490905563, now seen corresponding path program 1 times [2018-11-18 11:22:26,090 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:22:26,090 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:22:26,091 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:26,091 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:22:26,091 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:26,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:22:26,862 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:22:26,862 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:22:26,862 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:22:26,862 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:22:26,862 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:22:26,863 INFO L82 PathProgramCache]: Analyzing trace with hash 1396306389, now seen corresponding path program 1 times [2018-11-18 11:22:26,863 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:22:26,863 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:22:26,863 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:26,863 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:22:26,863 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:26,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:22:26,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:22:26,907 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:22:26,907 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:22:26,907 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:22:26,907 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:22:26,907 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:22:26,908 INFO L87 Difference]: Start difference. First operand 336024 states and 613164 transitions. cyclomatic complexity: 277159 Second operand 5 states. [2018-11-18 11:22:32,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:22:32,863 INFO L93 Difference]: Finished difference Result 647639 states and 1172988 transitions. [2018-11-18 11:22:32,863 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 11:22:32,864 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 647639 states and 1172988 transitions. [2018-11-18 11:22:35,616 INFO L131 ngComponentsAnalysis]: Automaton has 17 accepting balls. 179901 [2018-11-18 11:22:37,646 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 647639 states to 647639 states and 1172988 transitions. [2018-11-18 11:22:37,646 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 620070 [2018-11-18 11:22:37,842 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 620070 [2018-11-18 11:22:37,842 INFO L73 IsDeterministic]: Start isDeterministic. Operand 647639 states and 1172988 transitions. [2018-11-18 11:22:37,919 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:22:37,919 INFO L705 BuchiCegarLoop]: Abstraction has 647639 states and 1172988 transitions. [2018-11-18 11:22:38,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647639 states and 1172988 transitions. [2018-11-18 11:22:50,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647639 to 348436. [2018-11-18 11:22:50,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 348436 states. [2018-11-18 11:22:50,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348436 states to 348436 states and 635758 transitions. [2018-11-18 11:22:50,836 INFO L728 BuchiCegarLoop]: Abstraction has 348436 states and 635758 transitions. [2018-11-18 11:22:50,836 INFO L608 BuchiCegarLoop]: Abstraction has 348436 states and 635758 transitions. [2018-11-18 11:22:50,836 INFO L442 BuchiCegarLoop]: ======== Iteration 27============ [2018-11-18 11:22:50,836 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 348436 states and 635758 transitions. [2018-11-18 11:22:51,949 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 94334 [2018-11-18 11:22:51,949 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:22:51,949 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:22:51,952 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:22:51,952 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:22:51,953 INFO L794 eck$LassoCheckResult]: Stem: 13345925#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 13345926#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 13347980#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 13348154#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 13348155#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 13346912#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 13346913#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 13343343#L692 assume { :end_inline_initFloors } true; 13343131#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 13343132#L444 assume !(0 == getOrigin_~person); 13347272#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 13345494#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 13349197#L970 assume 0 == initPersonOnFloor_~floor; 13347947#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 13341862#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 13345185#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 13341612#L774-2 assume { :end_inline_callOnFloor } true; 13341613#L1114 assume { :end_inline_initPersonOnFloor } true; 13348366#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 13348367#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13347043#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 13347044#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 13343871#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13343872#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13348494#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 13348495#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 13343086#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13373583#L699 assume !(0 == isFloorCalling_~floorID); 13373582#L703 assume !(1 == isFloorCalling_~floorID); 13373580#L707 assume !(2 == isFloorCalling_~floorID); 13373578#L711 assume !(3 == isFloorCalling_~floorID); 13373576#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13373574#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 13373573#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13373572#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 13373571#L2113-10 assume !(1 == buttonForFloorIsPressed_~floorID); 13373570#L2117-10 assume !(2 == buttonForFloorIsPressed_~floorID); 13373569#L2121-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13373567#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 13373565#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 13373564#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 13373562#L2854 assume !(0 != timeShift_~tmp___9~3); 13373561#L2945 assume !(1 == ~doorState~0); 13373560#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 13373559#L2296 assume !(1 == stopRequestedInDirection_~dir); 13373558#L2465 assume !(0 == ~currentFloorID~0); 13373557#L2471 assume ~currentFloorID~0 > 0; 13373556#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13373549#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13373547#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 13373548#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 13396572#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 13396490#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 13396442#L2672 assume !(1 == ~currentHeading~0); 13395552#L2682 assume !(0 == ~currentFloorID~0); 13366700#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 13366701#L2688-1 assume { :end_inline_continueInDirection } true; 13366687#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 13366688#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13366677#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 13366678#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 13366564#L1448 assume !(1 == ~expectedDirection~0); 13366563#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 13366558#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 13366559#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13366551#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 13366552#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 13366545#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13366546#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13418252#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 13418249#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 13418250#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13435482#L699-21 assume !(0 == isFloorCalling_~floorID); 13435476#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13435474#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 13435470#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13435472#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 13435480#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13435475#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 13435473#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 13435468#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 13435469#L2854-2 assume !(0 != timeShift_~tmp___9~3); 13498859#L2945-3 assume !(1 == ~doorState~0); 13498855#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 13498852#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 13498849#L2465-2 assume !(0 == ~currentFloorID~0); 13498846#L2471-2 assume ~currentFloorID~0 > 0; 13498843#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13498632#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13498627#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 13498628#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 13346386#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 13501891#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 13501890#L2672-3 assume !(1 == ~currentHeading~0); 13501583#L2682-9 assume !(0 == ~currentFloorID~0); 13383287#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 13383288#L2688-7 assume { :end_inline_continueInDirection } true; 13431955#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 13383174#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13381372#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 13382644#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 13382645#L1448-1 assume !(1 == ~expectedDirection~0); 13381329#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 13381330#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 13381305#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13381306#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 13381286#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 13381287#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13431775#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13431768#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 13431769#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 13438768#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13431737#L699-42 assume !(0 == isFloorCalling_~floorID); 13431738#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13431726#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 13431722#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13431724#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 13431732#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13431727#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 13431725#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 13431609#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 13431610#L2854-4 assume !(0 != timeShift_~tmp___9~3); 13504311#L2945-6 assume !(1 == ~doorState~0); 13504309#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 13504307#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 13504306#L2465-4 assume !(0 == ~currentFloorID~0); 13504305#L2471-4 assume ~currentFloorID~0 > 0; 13504303#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13504298#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13504299#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 13520046#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 13520036#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 13520034#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 13520032#L2672-6 assume !(1 == ~currentHeading~0); 13520030#L2682-18 assume !(0 == ~currentFloorID~0); 13519874#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 13519871#L2688-13 assume { :end_inline_continueInDirection } true; 13519869#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 13519851#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13519850#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 13519849#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 13519848#L1448-2 assume !(1 == ~expectedDirection~0); 13519844#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 13519843#L2977-2 assume { :end_inline_timeShift } true; 13519842#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 13519841#L444-1 assume !(0 == getOrigin_~person); 13397087#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 13397084#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 13397082#L970-1 assume 0 == initPersonOnFloor_~floor; 13397083#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 13519808#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 13519740#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 13519737#L774-5 assume { :end_inline_callOnFloor } true; 13519736#L1114-1 assume { :end_inline_initPersonOnFloor } true; 13519735#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 13519730#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13519728#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 13519726#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 13519721#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13519722#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13521925#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 13521926#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 13522364#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13528030#L699-63 assume !(0 == isFloorCalling_~floorID); 13528031#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13528027#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 13528025#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13528024#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 13528018#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13528019#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 13549107#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 13549106#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 13549105#L2854-6 assume !(0 != timeShift_~tmp___9~3); 13528004#L2945-9 assume !(1 == ~doorState~0); 13528000#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 13527996#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 13527997#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 13529735#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 13528987#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 13536402#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 13536400#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 13536401#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 13536626#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 13536625#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 13536618#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 13536473#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 13536451#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 13536444#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 13536439#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 13536435#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 13536434#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 13536368#L2676-30 assume !(0 != continueInDirection_~tmp~19); 13536370#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13637323#L2688-21 assume { :end_inline_continueInDirection } true; 13637274#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 13637266#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13637217#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 13637242#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 13637207#L1448-3 assume !(1 == ~expectedDirection~0); 13637205#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 13637201#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 13636963#L188-3 [2018-11-18 11:22:51,968 INFO L796 eck$LassoCheckResult]: Loop: 13636963#L188-3 assume true; 13636962#L188-1 assume !false; 13636961#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 13636959#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 13636957#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 13636955#L196 assume 1 != cleanup_~tmp___0~0; 13636953#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13636950#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13636949#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 13636939#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 13636921#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 13636918#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 13636915#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 13636912#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 13636909#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 13636906#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 13636903#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 13633938#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 13633912#L1327-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 13633840#L1338-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 13633837#L1349-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 13633813#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 13641165#L699-89 assume !(0 == isFloorCalling_~floorID); 13640959#L703-89 assume !(1 == isFloorCalling_~floorID); 13637243#L707-89 assume !(2 == isFloorCalling_~floorID); 13633792#L711-89 assume !(3 == isFloorCalling_~floorID); 13633822#L715-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 13633820#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 13633817#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 13633816#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 13633815#L2113-54 assume !(1 == buttonForFloorIsPressed_~floorID); 13633814#L2117-54 assume !(2 == buttonForFloorIsPressed_~floorID); 13633785#L2121-54 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 13633780#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 13633778#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 13633777#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 13633767#L2854-8 assume !(0 != timeShift_~tmp___9~3); 13633766#L2945-12 assume !(1 == ~doorState~0); 13633765#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 13633764#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 13633763#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 13633762#L2300-8 assume !(0 != stopRequestedInDirection_~tmp~18); 13633761#L2306-8 assume !(~currentFloorID~0 < 0); 13633760#L2321-8 assume !(~currentFloorID~0 < 0); 13633759#L2334-8 assume !(~currentFloorID~0 < 1); 13633758#L2350-8 assume !(~currentFloorID~0 < 1); 13633756#L2363-8 assume !(~currentFloorID~0 < 2); 13633754#L2379-8 assume ~currentFloorID~0 < 2; 13633755#L2381-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 13654168#L2382-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 13654113#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 13654016#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 13654014#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 13653908#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 13653907#L2676-36 assume !(0 != continueInDirection_~tmp~19); 13544447#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13637322#L2688-25 assume { :end_inline_continueInDirection } true; 13637319#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 13637315#L1436-4 assume !(-1 == ~expectedDirection~0); 13637312#L1448-4 assume !(1 == ~expectedDirection~0); 13637257#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 13637200#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 13636963#L188-3 [2018-11-18 11:22:51,975 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:22:51,975 INFO L82 PathProgramCache]: Analyzing trace with hash -1168550767, now seen corresponding path program 1 times [2018-11-18 11:22:51,975 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:22:51,975 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:22:51,976 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:51,976 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:22:51,976 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:51,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:22:52,757 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:22:52,757 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:22:52,757 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:22:52,758 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:22:52,758 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:22:52,758 INFO L82 PathProgramCache]: Analyzing trace with hash -601988424, now seen corresponding path program 1 times [2018-11-18 11:22:52,758 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:22:52,758 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:22:52,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:52,759 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:22:52,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:22:52,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:22:52,807 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:22:52,807 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:22:52,807 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:22:52,808 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:22:52,808 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:22:52,808 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:22:52,808 INFO L87 Difference]: Start difference. First operand 348436 states and 635758 transitions. cyclomatic complexity: 287341 Second operand 5 states. [2018-11-18 11:22:58,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:22:58,377 INFO L93 Difference]: Finished difference Result 633845 states and 1145822 transitions. [2018-11-18 11:22:58,377 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 11:22:58,377 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 633845 states and 1145822 transitions. [2018-11-18 11:23:00,738 INFO L131 ngComponentsAnalysis]: Automaton has 17 accepting balls. 174225 [2018-11-18 11:23:01,970 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 633845 states to 633845 states and 1145822 transitions. [2018-11-18 11:23:01,970 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 606212 [2018-11-18 11:23:02,306 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 606212 [2018-11-18 11:23:02,306 INFO L73 IsDeterministic]: Start isDeterministic. Operand 633845 states and 1145822 transitions. [2018-11-18 11:23:02,426 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:23:02,426 INFO L705 BuchiCegarLoop]: Abstraction has 633845 states and 1145822 transitions. [2018-11-18 11:23:03,534 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633845 states and 1145822 transitions. [2018-11-18 11:23:06,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633845 to 329576. [2018-11-18 11:23:06,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 329576 states. [2018-11-18 11:23:07,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329576 states to 329576 states and 600146 transitions. [2018-11-18 11:23:07,115 INFO L728 BuchiCegarLoop]: Abstraction has 329576 states and 600146 transitions. [2018-11-18 11:23:07,115 INFO L608 BuchiCegarLoop]: Abstraction has 329576 states and 600146 transitions. [2018-11-18 11:23:07,115 INFO L442 BuchiCegarLoop]: ======== Iteration 28============ [2018-11-18 11:23:07,115 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 329576 states and 600146 transitions. [2018-11-18 11:23:07,653 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 88034 [2018-11-18 11:23:07,653 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:23:07,653 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:23:07,656 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:23:07,656 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:23:07,657 INFO L794 eck$LassoCheckResult]: Stem: 14328199#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 14328200#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 14330244#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 14330419#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 14330420#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 14329188#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 14329189#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 14325638#L692 assume { :end_inline_initFloors } true; 14325430#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 14325431#L444 assume !(0 == getOrigin_~person); 14329542#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 14327783#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 14331479#L970 assume 0 == initPersonOnFloor_~floor; 14330212#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 14324165#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 14327472#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 14323915#L774-2 assume { :end_inline_callOnFloor } true; 14323916#L1114 assume { :end_inline_initPersonOnFloor } true; 14330657#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 14330658#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14329315#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 14329316#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 14326170#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14326171#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14330788#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 14330789#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 14345716#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14345713#L699 assume !(0 == isFloorCalling_~floorID); 14345709#L703 assume !(1 == isFloorCalling_~floorID); 14345706#L707 assume !(2 == isFloorCalling_~floorID); 14345703#L711 assume !(3 == isFloorCalling_~floorID); 14345699#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14345697#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 14345695#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14345694#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 14345693#L2113-10 assume !(1 == buttonForFloorIsPressed_~floorID); 14345692#L2117-10 assume !(2 == buttonForFloorIsPressed_~floorID); 14345691#L2121-10 assume !(3 == buttonForFloorIsPressed_~floorID); 14345690#L2125-10 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14345689#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 14345687#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 14345686#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 14345684#L2854 assume !(0 != timeShift_~tmp___9~3); 14345683#L2945 assume !(1 == ~doorState~0); 14345682#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 14345681#L2296 assume !(1 == stopRequestedInDirection_~dir); 14345680#L2465 assume !(0 == ~currentFloorID~0); 14345678#L2471 assume ~currentFloorID~0 > 0; 14345676#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14345672#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14345668#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 14345669#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 14328658#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 14377421#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 14382609#L2672 assume !(1 == ~currentHeading~0); 14382608#L2682 assume !(0 == ~currentFloorID~0); 14382547#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14382546#L2688-1 assume { :end_inline_continueInDirection } true; 14382543#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 14382542#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14345588#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 14345949#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 14345950#L1448 assume !(1 == ~expectedDirection~0); 14345533#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 14345534#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 14345512#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14345513#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 14345462#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 14345463#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14382498#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14400904#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 14400902#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 14400903#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14411940#L699-21 assume !(0 == isFloorCalling_~floorID); 14411935#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14411933#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 14411929#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14411931#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 14411938#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14411934#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 14411932#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 14411437#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 14411438#L2854-2 assume !(0 != timeShift_~tmp___9~3); 14428162#L2945-3 assume !(1 == ~doorState~0); 14428159#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 14428156#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 14428150#L2465-2 assume !(0 == ~currentFloorID~0); 14428146#L2471-2 assume ~currentFloorID~0 > 0; 14428142#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14428134#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14428126#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 14428082#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 14428074#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 14428071#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 14428069#L2672-3 assume !(1 == ~currentHeading~0); 14428066#L2682-9 assume !(0 == ~currentFloorID~0); 14424920#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14382863#L2688-7 assume { :end_inline_continueInDirection } true; 14382861#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 14382842#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14382712#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 14382708#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 14382709#L1448-1 assume !(1 == ~expectedDirection~0); 14382693#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 14382694#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 14382686#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14382687#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 14382440#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 14382441#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14424879#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14424877#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 14424874#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 14424875#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14465789#L699-42 assume !(0 == isFloorCalling_~floorID); 14465784#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14465785#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 14472355#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14472354#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 14472351#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14472349#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 14465607#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 14465602#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 14465603#L2854-4 assume !(0 != timeShift_~tmp___9~3); 14483815#L2945-6 assume !(1 == ~doorState~0); 14483813#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 14483810#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 14483809#L2465-4 assume !(0 == ~currentFloorID~0); 14483808#L2471-4 assume ~currentFloorID~0 > 0; 14483806#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14483801#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14483802#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 14483993#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 14324191#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 14483987#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 14483985#L2672-6 assume !(1 == ~currentHeading~0); 14483982#L2682-18 assume !(0 == ~currentFloorID~0); 14479803#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14382420#L2688-13 assume { :end_inline_continueInDirection } true; 14382419#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 14382406#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14382381#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 14382401#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 14382402#L1448-2 assume !(1 == ~expectedDirection~0); 14382366#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 14382367#L2977-2 assume { :end_inline_timeShift } true; 14382360#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 14382361#L444-1 assume !(0 == getOrigin_~person); 14382351#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 14382347#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 14382342#L970-1 assume 0 == initPersonOnFloor_~floor; 14382343#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 14479613#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 14382127#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 14378165#L774-5 assume { :end_inline_callOnFloor } true; 14382119#L1114-1 assume { :end_inline_initPersonOnFloor } true; 14382120#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 14382111#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14382112#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 14382105#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 14382106#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14479583#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14479581#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 14479578#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 14479579#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14510609#L699-63 assume !(0 == isFloorCalling_~floorID); 14510610#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14510598#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 14510595#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14510593#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 14510585#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14510586#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 14523970#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 14523969#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 14523967#L2854-6 assume !(0 != timeShift_~tmp___9~3); 14510467#L2945-9 assume !(1 == ~doorState~0); 14510466#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 14510464#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 14510465#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 14511961#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 14324929#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 14512410#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 14512404#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 14512405#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 14512421#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 14512417#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 14512276#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 14512072#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 14512064#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 14512061#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 14512057#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 14512054#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 14512053#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 14328778#L2676-30 assume !(0 != continueInDirection_~tmp~19); 14328779#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 14591073#L2688-21 assume { :end_inline_continueInDirection } true; 14591064#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 14591046#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14590997#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 14591026#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 14590988#L1448-3 assume !(1 == ~expectedDirection~0); 14590985#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 14590981#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 14590978#L188-3 [2018-11-18 11:23:07,673 INFO L796 eck$LassoCheckResult]: Loop: 14590978#L188-3 assume true; 14590977#L188-1 assume !false; 14590976#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 14590974#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 14590972#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 14590970#L196 assume 1 != cleanup_~tmp___0~0; 14590968#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14590965#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14590964#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 14590943#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 14590934#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 14590929#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 14590924#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 14590919#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 14590914#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 14590909#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 14590875#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 14590856#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 14590829#L1327-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14590830#L2109-46 assume !(0 == buttonForFloorIsPressed_~floorID); 14599610#L2113-46 assume !(1 == buttonForFloorIsPressed_~floorID); 14599608#L2117-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14599606#L2130-46 __utac_acc__Specification3_spec__1_#t~ret24 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___2~1 := __utac_acc__Specification3_spec__1_#t~ret24;havoc __utac_acc__Specification3_spec__1_#t~ret24; 14599603#L1332-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~1;~expectedDirection~0 := 1; 14599589#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14597436#L699-89 assume !(0 == isFloorCalling_~floorID); 14597221#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14597218#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 14597214#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 14597213#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 14597211#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 14597207#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 14597208#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 14597202#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 14597203#L2854-8 assume !(0 != timeShift_~tmp___9~3); 14597199#L2945-12 assume !(1 == ~doorState~0); 14597198#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 14597197#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 14597196#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 14597195#L2300-8 assume !(0 != stopRequestedInDirection_~tmp~18); 14597194#L2306-8 assume !(~currentFloorID~0 < 0); 14597193#L2321-8 assume !(~currentFloorID~0 < 0); 14597192#L2334-8 assume !(~currentFloorID~0 < 1); 14591174#L2350-8 assume !(~currentFloorID~0 < 1); 14590628#L2363-8 assume ~currentFloorID~0 < 2; 14590620#L2365-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 14590617#L699-92 assume !(0 == isFloorCalling_~floorID); 14590613#L703-92 assume !(1 == isFloorCalling_~floorID); 14590608#L707-92 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 14590600#L726-92 stopRequestedInDirection_#t~ret79 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___2~3 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79; 14590521#L2369-8 assume 0 != stopRequestedInDirection_~tmp___2~3;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 14590511#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 14590512#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 14590412#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 14590408#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 14590409#L2676-36 assume !(0 != continueInDirection_~tmp~19); 14581790#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 14591091#L2688-25 assume { :end_inline_continueInDirection } true; 14591082#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 14591075#L1436-4 assume !(-1 == ~expectedDirection~0); 14591065#L1448-4 assume !(1 == ~expectedDirection~0); 14591027#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 14590980#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 14590978#L188-3 [2018-11-18 11:23:07,681 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:23:07,682 INFO L82 PathProgramCache]: Analyzing trace with hash -2023871882, now seen corresponding path program 1 times [2018-11-18 11:23:07,682 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:23:07,682 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:23:07,682 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:07,682 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:23:07,682 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:07,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:23:08,461 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:23:08,461 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:23:08,461 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:23:08,461 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:23:08,461 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:23:08,461 INFO L82 PathProgramCache]: Analyzing trace with hash 1735743078, now seen corresponding path program 1 times [2018-11-18 11:23:08,462 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:23:08,462 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:23:08,462 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:08,462 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:23:08,462 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:08,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:23:08,503 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:23:08,503 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:23:08,503 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:23:08,503 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:23:08,503 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:23:08,503 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:23:08,504 INFO L87 Difference]: Start difference. First operand 329576 states and 600146 transitions. cyclomatic complexity: 270589 Second operand 3 states. [2018-11-18 11:23:12,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:23:12,314 INFO L93 Difference]: Finished difference Result 433616 states and 789411 transitions. [2018-11-18 11:23:12,314 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:23:12,314 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 433616 states and 789411 transitions. [2018-11-18 11:23:14,480 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 119175 [2018-11-18 11:23:15,450 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 433616 states to 433616 states and 789411 transitions. [2018-11-18 11:23:15,450 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 411937 [2018-11-18 11:23:15,702 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 411937 [2018-11-18 11:23:15,702 INFO L73 IsDeterministic]: Start isDeterministic. Operand 433616 states and 789411 transitions. [2018-11-18 11:23:15,785 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:23:15,785 INFO L705 BuchiCegarLoop]: Abstraction has 433616 states and 789411 transitions. [2018-11-18 11:23:15,983 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433616 states and 789411 transitions. [2018-11-18 11:23:26,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433616 to 424728. [2018-11-18 11:23:26,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 424728 states. [2018-11-18 11:23:28,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 424728 states to 424728 states and 776187 transitions. [2018-11-18 11:23:28,078 INFO L728 BuchiCegarLoop]: Abstraction has 424728 states and 776187 transitions. [2018-11-18 11:23:28,078 INFO L608 BuchiCegarLoop]: Abstraction has 424728 states and 776187 transitions. [2018-11-18 11:23:28,078 INFO L442 BuchiCegarLoop]: ======== Iteration 29============ [2018-11-18 11:23:28,078 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 424728 states and 776187 transitions. [2018-11-18 11:23:28,677 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 116135 [2018-11-18 11:23:28,677 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:23:28,677 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:23:28,680 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:23:28,680 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:23:28,680 INFO L794 eck$LassoCheckResult]: Stem: 15091375#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 15091376#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 15093401#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 15093560#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 15093561#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 15092366#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 15092367#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 15088827#L692 assume { :end_inline_initFloors } true; 15088621#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 15088622#L444 assume !(0 == getOrigin_~person); 15092737#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 15090949#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 15094519#L970 assume 0 == initPersonOnFloor_~floor; 15093372#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 15087365#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 15090643#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 15087124#L774-2 assume { :end_inline_callOnFloor } true; 15087125#L1114 assume { :end_inline_initPersonOnFloor } true; 15090663#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 15088028#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15088029#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 15087218#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 15087219#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15093650#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15093651#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 15161057#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 15092874#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15161412#L699 assume !(0 == isFloorCalling_~floorID); 15161411#L703 assume !(1 == isFloorCalling_~floorID); 15161410#L707 assume !(2 == isFloorCalling_~floorID); 15161409#L711 assume !(3 == isFloorCalling_~floorID); 15161408#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15161407#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 15161406#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15161405#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 15161404#L2113-10 assume !(1 == buttonForFloorIsPressed_~floorID); 15161403#L2117-10 assume !(2 == buttonForFloorIsPressed_~floorID); 15161402#L2121-10 assume !(3 == buttonForFloorIsPressed_~floorID); 15161401#L2125-10 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15161400#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 15161398#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 15161397#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 15161395#L2854 assume !(0 != timeShift_~tmp___9~3); 15161394#L2945 assume !(1 == ~doorState~0); 15161393#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 15161391#L2296 assume !(1 == stopRequestedInDirection_~dir); 15161390#L2465 assume !(0 == ~currentFloorID~0); 15161388#L2471 assume ~currentFloorID~0 > 0; 15161386#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15161382#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15161375#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 15161376#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 15161873#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 15186698#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 15186697#L2672 assume !(1 == ~currentHeading~0); 15186695#L2682 assume !(0 == ~currentFloorID~0); 15186694#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15186692#L2688-1 assume { :end_inline_continueInDirection } true; 15186688#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 15186686#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15186680#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 15186677#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 15186675#L1448 assume !(1 == ~expectedDirection~0); 15186672#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 15137405#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 15137399#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15137392#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 15137391#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 15137388#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15137389#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15186473#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 15186456#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 15186458#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15244237#L699-21 assume !(0 == isFloorCalling_~floorID); 15244236#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15244039#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 15195576#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15195577#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 15195587#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15195580#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 15195578#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 15195579#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 15242889#L2854-2 assume !(0 != timeShift_~tmp___9~3); 15242887#L2945-3 assume !(1 == ~doorState~0); 15242886#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 15242883#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 15242884#L2465-2 assume !(0 == ~currentFloorID~0); 15242964#L2471-2 assume ~currentFloorID~0 > 0; 15242962#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15242959#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15242956#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 15242822#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 15087386#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 15242814#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 15242813#L2672-3 assume !(1 == ~currentHeading~0); 15242812#L2682-9 assume !(0 == ~currentFloorID~0); 15242811#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15242809#L2688-7 assume { :end_inline_continueInDirection } true; 15242805#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 15242803#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15242509#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 15242506#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 15242504#L1448-1 assume !(1 == ~expectedDirection~0); 15242493#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 15238480#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 15238479#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15238478#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 15238477#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 15236108#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15236103#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15236101#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 15236097#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 15236098#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15242431#L699-42 assume !(0 == isFloorCalling_~floorID); 15242432#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15269036#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 15269013#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15269014#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 15269043#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15269037#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 15269015#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 15269016#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 15312880#L2854-4 assume !(0 != timeShift_~tmp___9~3); 15312879#L2945-6 assume !(1 == ~doorState~0); 15313870#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 15313867#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 15313868#L2465-4 assume !(0 == ~currentFloorID~0); 15313890#L2471-4 assume ~currentFloorID~0 > 0; 15313888#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15313885#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15313883#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 15313805#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 15313802#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 15317666#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 15317667#L2672-6 assume !(1 == ~currentHeading~0); 15321238#L2682-18 assume !(0 == ~currentFloorID~0); 15321233#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15321206#L2688-13 assume { :end_inline_continueInDirection } true; 15321204#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 15321180#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15321167#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 15321165#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 15321154#L1448-2 assume !(1 == ~expectedDirection~0); 15321061#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 15321060#L2977-2 assume { :end_inline_timeShift } true; 15321059#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 15321057#L444-1 assume !(0 == getOrigin_~person); 15321053#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 15321050#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 15321049#L970-1 assume 0 == initPersonOnFloor_~floor; 15320970#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 15320952#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 15320943#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 15162072#L774-5 assume { :end_inline_callOnFloor } true; 15320934#L1114-1 assume { :end_inline_initPersonOnFloor } true; 15320931#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 15140510#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15140511#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 15140500#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 15140501#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15320920#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15320917#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 15320913#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 15320914#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15322718#L699-63 assume !(0 == isFloorCalling_~floorID); 15322719#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15322704#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 15322700#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15322696#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 15321801#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15321802#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 15337625#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 15337624#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 15337622#L2854-6 assume !(0 != timeShift_~tmp___9~3); 15318226#L2945-9 assume !(1 == ~doorState~0); 15318223#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 15318224#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 15318343#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 15318341#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 15318159#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 15319346#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 15319342#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 15319340#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 15319338#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 15319336#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 15319334#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 15319248#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 15319246#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 15319244#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 15319243#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 15319240#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 15319242#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 15343160#L2676-30 assume !(0 != continueInDirection_~tmp~19); 15319237#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 15441539#L2688-21 assume { :end_inline_continueInDirection } true; 15441537#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 15441535#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15441483#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 15441480#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 15441477#L1448-3 assume !(1 == ~expectedDirection~0); 15441474#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 15441473#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 15441469#L188-3 [2018-11-18 11:23:28,702 INFO L796 eck$LassoCheckResult]: Loop: 15441469#L188-3 assume true; 15441467#L188-1 assume !false; 15441466#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 15441465#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 15441464#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 15441463#L196 assume 1 != cleanup_~tmp___0~0; 15441462#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15441459#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15441460#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 15441420#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 15441414#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 15441411#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 15441182#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 15441175#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 15441171#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 15441167#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 15436112#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 15399791#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 15390950#L1327-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 15399776#L1338-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 15397134#L1349-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 15397135#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 15415488#L699-89 assume !(0 == isFloorCalling_~floorID); 15415487#L703-89 assume !(1 == isFloorCalling_~floorID); 15415485#L707-89 assume !(2 == isFloorCalling_~floorID); 15399745#L711-89 assume !(3 == isFloorCalling_~floorID); 15399170#L715-89 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 15415481#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 15415476#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 15415477#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 15415486#L2113-54 assume !(1 == buttonForFloorIsPressed_~floorID); 15415484#L2117-54 assume !(2 == buttonForFloorIsPressed_~floorID); 15415483#L2121-54 assume !(3 == buttonForFloorIsPressed_~floorID); 15415482#L2125-54 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 15415480#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 15415478#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 15415479#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 15332004#L2854-8 assume !(0 != timeShift_~tmp___9~3); 15332002#L2945-12 assume !(1 == ~doorState~0); 15332000#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 15331998#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 15331996#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 15331994#L2300-8 assume !(0 != stopRequestedInDirection_~tmp~18); 15331992#L2306-8 assume !(~currentFloorID~0 < 0); 15331991#L2321-8 assume !(~currentFloorID~0 < 0); 15331990#L2334-8 assume !(~currentFloorID~0 < 1); 15331989#L2350-8 assume !(~currentFloorID~0 < 1); 15331987#L2363-8 assume !(~currentFloorID~0 < 2); 15331984#L2379-8 assume ~currentFloorID~0 < 2; 15331985#L2381-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 15391311#L2382-8 assume 0 != ~floorButtons_2~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 15391246#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 15391247#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 15391453#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 15441498#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 15441496#L2676-36 assume !(0 != continueInDirection_~tmp~19); 15331823#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 15441495#L2688-25 assume { :end_inline_continueInDirection } true; 15441489#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 15441485#L1436-4 assume !(-1 == ~expectedDirection~0); 15441486#L1448-4 assume !(1 == ~expectedDirection~0); 15441475#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 15441472#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 15441469#L188-3 [2018-11-18 11:23:28,711 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:23:28,711 INFO L82 PathProgramCache]: Analyzing trace with hash -2023871882, now seen corresponding path program 2 times [2018-11-18 11:23:28,711 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:23:28,711 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:23:28,711 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:28,711 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:23:28,711 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:28,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:23:29,461 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:23:29,462 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:23:29,462 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:23:29,462 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:23:29,462 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:23:29,462 INFO L82 PathProgramCache]: Analyzing trace with hash 1931962448, now seen corresponding path program 1 times [2018-11-18 11:23:29,462 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:23:29,462 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:23:29,463 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:29,463 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:23:29,463 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:29,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:23:29,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:23:29,518 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:23:29,518 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:23:29,518 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:23:29,518 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:23:29,518 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:23:29,519 INFO L87 Difference]: Start difference. First operand 424728 states and 776187 transitions. cyclomatic complexity: 351478 Second operand 3 states. [2018-11-18 11:23:34,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:23:34,328 INFO L93 Difference]: Finished difference Result 572478 states and 1047989 transitions. [2018-11-18 11:23:34,329 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:23:34,329 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 572478 states and 1047989 transitions. [2018-11-18 11:23:36,768 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 160760 [2018-11-18 11:23:38,010 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 572478 states to 571866 states and 1047325 transitions. [2018-11-18 11:23:38,010 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 550955 [2018-11-18 11:23:38,349 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 550955 [2018-11-18 11:23:38,349 INFO L73 IsDeterministic]: Start isDeterministic. Operand 571866 states and 1047325 transitions. [2018-11-18 11:23:38,369 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:23:38,369 INFO L705 BuchiCegarLoop]: Abstraction has 571866 states and 1047325 transitions. [2018-11-18 11:23:38,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 571866 states and 1047325 transitions. [2018-11-18 11:23:42,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 571866 to 570700. [2018-11-18 11:23:42,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 570700 states. [2018-11-18 11:23:43,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 570700 states to 570700 states and 1046126 transitions. [2018-11-18 11:23:43,383 INFO L728 BuchiCegarLoop]: Abstraction has 570700 states and 1046126 transitions. [2018-11-18 11:23:43,383 INFO L608 BuchiCegarLoop]: Abstraction has 570700 states and 1046126 transitions. [2018-11-18 11:23:43,383 INFO L442 BuchiCegarLoop]: ======== Iteration 30============ [2018-11-18 11:23:43,383 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 570700 states and 1046126 transitions. [2018-11-18 11:23:45,211 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 160611 [2018-11-18 11:23:45,211 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:23:45,211 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:23:45,214 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:23:45,214 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:23:45,215 INFO L794 eck$LassoCheckResult]: Stem: 16088514#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 16088515#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 16090458#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 16090606#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 16090607#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 16089464#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 16089465#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 16086007#L692 assume { :end_inline_initFloors } true; 16085815#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 16085816#L444 assume !(0 == getOrigin_~person); 16089800#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 16088104#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 16091487#L970 assume 0 == initPersonOnFloor_~floor; 16090427#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 16084578#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 16087817#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 16084337#L774-2 assume { :end_inline_callOnFloor } true; 16084338#L1114 assume { :end_inline_initPersonOnFloor } true; 16087838#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 16085244#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16085245#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 16084431#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 16084432#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16086528#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16090693#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 16086420#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 16084487#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16115493#L699 assume !(0 == isFloorCalling_~floorID); 16115491#L703 assume !(1 == isFloorCalling_~floorID); 16115489#L707 assume !(2 == isFloorCalling_~floorID); 16115487#L711 assume !(3 == isFloorCalling_~floorID); 16115485#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16115483#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 16115479#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16115481#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 16115492#L2113-10 assume !(1 == buttonForFloorIsPressed_~floorID); 16115490#L2117-10 assume !(2 == buttonForFloorIsPressed_~floorID); 16115488#L2121-10 assume !(3 == buttonForFloorIsPressed_~floorID); 16115486#L2125-10 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16115484#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 16115482#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 16115381#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 16115382#L2854 assume !(0 != timeShift_~tmp___9~3); 16127828#L2945 assume !(1 == ~doorState~0); 16127826#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 16127823#L2296 assume !(1 == stopRequestedInDirection_~dir); 16127821#L2465 assume !(0 == ~currentFloorID~0); 16127818#L2471 assume ~currentFloorID~0 > 0; 16127816#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16127804#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16127801#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 16127802#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 16129140#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 16129141#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 16089604#L2672 assume !(1 == ~currentHeading~0); 16087377#L2682 assume !(0 == ~currentFloorID~0); 16087359#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 16086545#L2688-1 assume { :end_inline_continueInDirection } true; 16086540#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 16144551#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16128591#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 16158041#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 16158034#L1448 assume !(1 == ~expectedDirection~0); 16158030#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 16127711#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 16127708#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16127706#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 16127704#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 16122887#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16122888#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16161117#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 16146481#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 16146483#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16161276#L699-21 assume !(0 == isFloorCalling_~floorID); 16161275#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16161273#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 16161185#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16161187#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 16161395#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16161387#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 16161188#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 16161181#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 16161182#L2854-2 assume !(0 != timeShift_~tmp___9~3); 16203051#L2945-3 assume !(1 == ~doorState~0); 16203048#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 16203044#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 16203041#L2465-2 assume !(0 == ~currentFloorID~0); 16203037#L2471-2 assume ~currentFloorID~0 > 0; 16203032#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16203025#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16202997#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 16202998#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 16203324#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 16203325#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 16203237#L2672-3 assume !(1 == ~currentHeading~0); 16196539#L2682-9 assume !(0 == ~currentFloorID~0); 16196223#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 16129825#L2688-7 assume { :end_inline_continueInDirection } true; 16129823#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 16129791#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16127749#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 16129786#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 16129787#L1448-1 assume !(1 == ~expectedDirection~0); 16122405#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 16122406#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 16122397#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16122398#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 16120228#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 16120229#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16196205#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16196203#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 16196199#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 16196197#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16196194#L699-42 assume !(0 == isFloorCalling_~floorID); 16196188#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16196186#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 16196182#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16196183#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 16196192#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16196187#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 16196184#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 16196185#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 16374834#L2854-4 assume !(0 != timeShift_~tmp___9~3); 16088975#L2945-6 assume !(1 == ~doorState~0); 16088954#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 16088955#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 16090464#L2465-4 assume !(0 == ~currentFloorID~0); 16090044#L2471-4 assume ~currentFloorID~0 > 0; 16089887#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16089888#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16090673#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 16305607#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 16305608#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 16328114#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 16328115#L2672-6 assume !(1 == ~currentHeading~0); 16365291#L2682-18 assume !(0 == ~currentFloorID~0); 16365290#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 16365281#L2688-13 assume { :end_inline_continueInDirection } true; 16365279#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 16365245#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16365244#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 16365243#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 16365242#L1448-2 assume !(1 == ~expectedDirection~0); 16365238#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 16365237#L2977-2 assume { :end_inline_timeShift } true; 16365236#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 16365234#L444-1 assume !(0 == getOrigin_~person); 16365235#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 16365333#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 16365332#L970-1 assume 0 == initPersonOnFloor_~floor; 16364839#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 16364822#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 16364736#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 16161999#L774-5 assume { :end_inline_callOnFloor } true; 16364731#L1114-1 assume { :end_inline_initPersonOnFloor } true; 16364729#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 16364727#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16364725#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 16364722#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 16364719#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16364717#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16364715#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 16364712#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 16364713#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16367972#L699-63 assume !(0 == isFloorCalling_~floorID); 16367969#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16367965#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 16367962#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16367961#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 16367654#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16367655#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 16439905#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 16439904#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 16439902#L2854-6 assume !(0 != timeShift_~tmp___9~3); 16353761#L2945-9 assume !(1 == ~doorState~0); 16353735#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 16353733#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 16353709#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 16353710#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 16353890#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 16329147#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 16329148#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 16329588#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 16329142#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 16329141#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 16329137#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 16329138#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 16431220#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 16431221#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 16431216#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 16431217#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 16431225#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 16431226#L2676-30 assume !(0 != continueInDirection_~tmp~19); 16548465#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 16548464#L2688-21 assume { :end_inline_continueInDirection } true; 16548463#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 16548461#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16548462#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 16548447#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 16548448#L1448-3 assume !(1 == ~expectedDirection~0); 16596938#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 16596937#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 16596936#L188-3 [2018-11-18 11:23:45,233 INFO L796 eck$LassoCheckResult]: Loop: 16596936#L188-3 assume true; 16596935#L188-1 assume !false; 16596934#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 16596933#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 16533706#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 16533707#L196 assume 1 != cleanup_~tmp___0~0; 16533698#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16533699#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16596920#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 16600499#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 16600493#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 16600480#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 16600478#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 16600476#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16600474#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 16600472#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 16600470#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 16600468#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 16505320#L1327-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16533568#L2109-46 assume !(0 == buttonForFloorIsPressed_~floorID); 16533565#L2113-46 assume !(1 == buttonForFloorIsPressed_~floorID); 16533562#L2117-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16533558#L2130-46 __utac_acc__Specification3_spec__1_#t~ret24 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___2~1 := __utac_acc__Specification3_spec__1_#t~ret24;havoc __utac_acc__Specification3_spec__1_#t~ret24; 16533554#L1332-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~1;~expectedDirection~0 := 1; 16533549#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16533548#L699-89 assume !(0 == isFloorCalling_~floorID); 16533546#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16533545#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 16533543#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 16533542#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 16533539#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 16533540#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 16539851#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 16539850#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 16539849#L2854-8 assume !(0 != timeShift_~tmp___9~3); 16525898#L2945-12 assume !(1 == ~doorState~0); 16525895#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 16525427#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 16525426#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 16525423#L2300-8 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 16525424#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 16545007#L2953-8 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 16536954#L2727-8 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 16545003#L2732-8 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 16545000#L2296-9 assume !(1 == stopRequestedInDirection_~dir); 16544997#L2465-9 assume !(0 == ~currentFloorID~0); 16544695#L2471-9 assume ~currentFloorID~0 > 0; 16478944#L2472-9 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 16544691#L699-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 16544689#L726-105 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 16544686#L2476-9 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 16544684#L2618-9 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 16544678#L2962-12 assume !(0 != timeShift_~tmp___7~3);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 16544675#L2672-14 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 16544673#L1273-24 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 16536949#L2676-42 assume !(0 != continueInDirection_~tmp~19); 16536942#L2682-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 16536855#L2688-29 assume { :end_inline_continueInDirection } true; 16536808#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 16536806#L1436-4 assume !(-1 == ~expectedDirection~0); 16536800#L1448-4 assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 16536798#L2144-14 __utac_acc__Specification3_spec__2_#t~ret33 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~12 := __utac_acc__Specification3_spec__2_#t~ret33;havoc __utac_acc__Specification3_spec__2_#t~ret33; 16536799#L1453-12 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~12); 16533885#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 16533886#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 16596936#L188-3 [2018-11-18 11:23:45,241 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:23:45,242 INFO L82 PathProgramCache]: Analyzing trace with hash -2023871882, now seen corresponding path program 3 times [2018-11-18 11:23:45,242 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:23:45,243 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:23:45,243 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:45,244 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:23:45,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:45,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:23:46,010 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:23:46,011 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:23:46,011 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:23:46,011 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:23:46,011 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:23:46,011 INFO L82 PathProgramCache]: Analyzing trace with hash 1258063598, now seen corresponding path program 1 times [2018-11-18 11:23:46,011 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:23:46,012 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:23:46,012 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:46,012 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:23:46,012 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:23:46,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:23:46,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:23:46,050 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:23:46,051 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 11:23:46,051 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:23:46,051 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 11:23:46,051 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 11:23:46,051 INFO L87 Difference]: Start difference. First operand 570700 states and 1046126 transitions. cyclomatic complexity: 475449 Second operand 5 states. [2018-11-18 11:23:51,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:23:51,502 INFO L93 Difference]: Finished difference Result 1088749 states and 1989842 transitions. [2018-11-18 11:23:51,502 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 11:23:51,502 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1088749 states and 1989842 transitions. [2018-11-18 11:24:04,251 INFO L131 ngComponentsAnalysis]: Automaton has 26 accepting balls. 311876 [2018-11-18 11:24:07,397 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1088749 states to 1088749 states and 1989842 transitions. [2018-11-18 11:24:07,397 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1046278 [2018-11-18 11:24:07,962 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1046278 [2018-11-18 11:24:07,962 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1088749 states and 1989842 transitions. [2018-11-18 11:24:08,090 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-18 11:24:08,090 INFO L705 BuchiCegarLoop]: Abstraction has 1088749 states and 1989842 transitions. [2018-11-18 11:24:08,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1088749 states and 1989842 transitions. [2018-11-18 11:24:13,877 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1088749 to 570964. [2018-11-18 11:24:13,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 570964 states. [2018-11-18 11:24:15,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 570964 states to 570964 states and 1046306 transitions. [2018-11-18 11:24:15,549 INFO L728 BuchiCegarLoop]: Abstraction has 570964 states and 1046306 transitions. [2018-11-18 11:24:15,549 INFO L608 BuchiCegarLoop]: Abstraction has 570964 states and 1046306 transitions. [2018-11-18 11:24:15,549 INFO L442 BuchiCegarLoop]: ======== Iteration 31============ [2018-11-18 11:24:15,549 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 570964 states and 1046306 transitions. [2018-11-18 11:24:16,336 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 160657 [2018-11-18 11:24:16,336 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:24:16,336 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:24:16,339 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:24:16,339 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:24:16,339 INFO L794 eck$LassoCheckResult]: Stem: 17748171#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(30);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(9);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(21);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(30);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(9);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(21);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(30);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(9);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(25);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(30);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(9);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(25);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string115.base,#t~string115.offset := 91];#memory_int := #memory_int[#t~string115.base,1 + #t~string115.offset := 95];#memory_int := #memory_int[#t~string115.base,2 + #t~string115.offset := 93];#memory_int := #memory_int[#t~string115.base,3 + #t~string115.offset := 0];call #t~string117.base, #t~string117.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string117.base,#t~string117.offset := 91];#memory_int := #memory_int[#t~string117.base,1 + #t~string117.offset := 93];#memory_int := #memory_int[#t~string117.base,2 + #t~string117.offset := 32];#memory_int := #memory_int[#t~string117.base,3 + #t~string117.offset := 0];call #t~string119.base, #t~string119.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string119.base,#t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,1 + #t~string119.offset := 97];#memory_int := #memory_int[#t~string119.base,2 + #t~string119.offset := 116];#memory_int := #memory_int[#t~string119.base,3 + #t~string119.offset := 32];#memory_int := #memory_int[#t~string119.base,4 + #t~string119.offset := 0];call #t~string121.base, #t~string121.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string121.base,#t~string121.offset := 37];#memory_int := #memory_int[#t~string121.base,1 + #t~string121.offset := 105];#memory_int := #memory_int[#t~string121.base,2 + #t~string121.offset := 0];call #t~string123.base, #t~string123.offset := #Ultimate.alloc(10);call #t~string125.base, #t~string125.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string125.base,#t~string125.offset := 117];#memory_int := #memory_int[#t~string125.base,1 + #t~string125.offset := 112];#memory_int := #memory_int[#t~string125.base,2 + #t~string125.offset := 0];call #t~string127.base, #t~string127.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string127.base,#t~string127.offset := 100];#memory_int := #memory_int[#t~string127.base,1 + #t~string127.offset := 111];#memory_int := #memory_int[#t~string127.base,2 + #t~string127.offset := 119];#memory_int := #memory_int[#t~string127.base,3 + #t~string127.offset := 110];#memory_int := #memory_int[#t~string127.base,4 + #t~string127.offset := 0];call #t~string129.base, #t~string129.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string129.base,#t~string129.offset := 32];#memory_int := #memory_int[#t~string129.base,1 + #t~string129.offset := 73];#memory_int := #memory_int[#t~string129.base,2 + #t~string129.offset := 76];#memory_int := #memory_int[#t~string129.base,3 + #t~string129.offset := 95];#memory_int := #memory_int[#t~string129.base,4 + #t~string129.offset := 112];#memory_int := #memory_int[#t~string129.base,5 + #t~string129.offset := 58];#memory_int := #memory_int[#t~string129.base,6 + #t~string129.offset := 0];call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string131.base,#t~string131.offset := 32];#memory_int := #memory_int[#t~string131.base,1 + #t~string131.offset := 37];#memory_int := #memory_int[#t~string131.base,2 + #t~string131.offset := 105];#memory_int := #memory_int[#t~string131.base,3 + #t~string131.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string135.base, #t~string135.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string135.base,#t~string135.offset := 32];#memory_int := #memory_int[#t~string135.base,1 + #t~string135.offset := 37];#memory_int := #memory_int[#t~string135.base,2 + #t~string135.offset := 105];#memory_int := #memory_int[#t~string135.base,3 + #t~string135.offset := 0];call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string137.base,#t~string137.offset := 32];#memory_int := #memory_int[#t~string137.base,1 + #t~string137.offset := 37];#memory_int := #memory_int[#t~string137.base,2 + #t~string137.offset := 105];#memory_int := #memory_int[#t~string137.base,3 + #t~string137.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string141.base, #t~string141.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string141.base,#t~string141.offset := 32];#memory_int := #memory_int[#t~string141.base,1 + #t~string141.offset := 70];#memory_int := #memory_int[#t~string141.base,2 + #t~string141.offset := 95];#memory_int := #memory_int[#t~string141.base,3 + #t~string141.offset := 112];#memory_int := #memory_int[#t~string141.base,4 + #t~string141.offset := 58];#memory_int := #memory_int[#t~string141.base,5 + #t~string141.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 10];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 0];~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 17748172#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 17750335#L1856 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 17750548#L1849 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 17750549#L1864 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 17749213#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 17749214#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 17745531#L692 assume { :end_inline_initFloors } true; 17745325#L1932 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 17745326#L444 assume !(0 == getOrigin_~person); 17749589#L448 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 17747724#L469 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 17751825#L970 assume 0 == initPersonOnFloor_~floor; 17750299#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 17744048#L1078-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 17747416#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 17747417#L774-2 assume { :end_inline_callOnFloor } true; 17747440#L1114 assume { :end_inline_initPersonOnFloor } true; 17747441#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 17744714#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 17744715#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 17743901#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 17743902#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 17750702#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 17750703#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 17745957#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 17743957#L1411 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 17749936#L699 assume !(0 == isFloorCalling_~floorID); 17750392#L703 assume !(1 == isFloorCalling_~floorID); 17750393#L707 assume !(2 == isFloorCalling_~floorID); 17751718#L711 assume !(3 == isFloorCalling_~floorID); 17751719#L715 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 17748273#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 17748274#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 17750679#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 17750680#L2113-10 assume !(1 == buttonForFloorIsPressed_~floorID); 17749655#L2117-10 assume !(2 == buttonForFloorIsPressed_~floorID); 17749656#L2121-10 assume !(3 == buttonForFloorIsPressed_~floorID); 17752016#L2125-10 assume 4 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_4~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 17752017#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 17752009#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 17752011#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 17752001#L2854 assume !(0 != timeShift_~tmp___9~3); 17752002#L2945 assume !(1 == ~doorState~0); 17845156#L2945-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 17845154#L2296 assume !(1 == stopRequestedInDirection_~dir); 17845155#L2465 assume !(0 == ~currentFloorID~0); 17749889#L2471 assume ~currentFloorID~0 > 0; 17749890#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 17752349#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 17752350#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 17820038#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 17744097#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 17820037#L2953 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 17944292#L2672 assume !(1 == ~currentHeading~0); 17944290#L2682 assume !(0 == ~currentFloorID~0); 17944288#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17944286#L2688-1 assume { :end_inline_continueInDirection } true; 17944272#L2962-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 17944198#L1436 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 17821199#L2144-1 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 17821404#L1440 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 17821191#L1448 assume !(1 == ~expectedDirection~0); 17821041#L1449 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 17777562#L2977 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 17777560#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 17777558#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 17777514#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 17777515#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 17920813#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 17920812#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 17920810#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 17920811#L1411-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 17920393#L699-21 assume !(0 == isFloorCalling_~floorID); 17920394#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 17930967#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 17930963#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 17930965#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 17930970#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 17930968#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 17930966#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 17930947#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 17930948#L2854-2 assume !(0 != timeShift_~tmp___9~3); 17943098#L2945-3 assume !(1 == ~doorState~0); 17943089#L2945-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 17943085#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 17943086#L2465-2 assume !(0 == ~currentFloorID~0); 17943091#L2471-2 assume ~currentFloorID~0 > 0; 17943090#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 17943087#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 17943084#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 17943081#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 17943073#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 17943074#L2953-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 18009027#L2672-3 assume !(1 == ~currentHeading~0); 18009025#L2682-9 assume !(0 == ~currentFloorID~0); 18009023#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 18009021#L2688-7 assume { :end_inline_continueInDirection } true; 18009013#L2962-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 18009012#L1436-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 18007946#L2144-4 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 18009002#L1440-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 18001401#L1448-1 assume !(1 == ~expectedDirection~0); 17821106#L1449-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 17821107#L2977-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 17777540#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 17777541#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 17777532#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 17777533#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 17976368#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 17976299#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 17973536#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 17973537#L1411-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 17972978#L699-42 assume !(0 == isFloorCalling_~floorID); 17972979#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 17977928#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 17977925#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 17977926#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 17977933#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 17977929#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 17977927#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 17977924#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 17977917#L2854-4 assume !(0 != timeShift_~tmp___9~3); 17952677#L2945-6 assume !(1 == ~doorState~0); 17952676#L2945-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 17952675#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 17952672#L2465-4 assume !(0 == ~currentFloorID~0); 17952673#L2471-4 assume ~currentFloorID~0 > 0; 17952664#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 17952665#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 17952657#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 17952658#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 18017355#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 18017356#L2953-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 17749380#L2672-6 assume !(1 == ~currentHeading~0); 17749381#L2682-18 assume !(0 == ~currentFloorID~0); 18031711#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 18031709#L2688-13 assume { :end_inline_continueInDirection } true; 18031572#L2962-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 18031516#L1436-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 18031510#L2144-7 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 18031432#L1440-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 18031204#L1448-2 assume !(1 == ~expectedDirection~0); 18031143#L1449-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 18031138#L2977-2 assume { :end_inline_timeShift } true; 18031134#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 18031131#L444-1 assume !(0 == getOrigin_~person); 18031127#L448-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~3 := 3;getOrigin_#res := getOrigin_~retValue_acc~3; 18031123#L469-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 18031120#L970-1 assume 0 == initPersonOnFloor_~floor; 18030629#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 18030386#L1078-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 17952503#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 17952501#L774-5 assume { :end_inline_callOnFloor } true; 17821100#L1114-1 assume { :end_inline_initPersonOnFloor } true; 17821101#L103-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 18024092#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 17778152#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 17778153#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 17758848#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 17758849#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 18027820#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 18027817#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 18027818#L1411-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 18029970#L699-63 assume !(0 == isFloorCalling_~floorID); 18029971#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 18029963#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 18029962#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 18029959#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 18029954#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 18029507#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 18023695#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 18023696#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 18042918#L2854-6 assume !(0 != timeShift_~tmp___9~3); 18042917#L2945-9 assume !(1 == ~doorState~0); 18042916#L2945-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 17952842#L2296-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 17952844#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 18031286#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 18031287#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 18031566#L2953-6 assume !(0 != timeShift_~tmp___8~3);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 18031564#L2727-6 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~24 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 18031565#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 18043983#L2296-7 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 18043982#L1273-17 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 18010659#L2300-7 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 18010660#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 18114402#L2962-9 assume 0 != timeShift_~tmp___7~3;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 18154469#L2727-7 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 18154467#L2732-7 timeShift_#t~ret112 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := timeShift_~tmp___5~3;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 18154465#L2672-10 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 18154463#L1273-18 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 18044027#L2676-30 assume !(0 != continueInDirection_~tmp~19); 18044028#L2682-32 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 18165143#L2688-21 assume { :end_inline_continueInDirection } true; 18165142#L2962-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 18165141#L1436-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 18164807#L2144-10 __utac_acc__Specification3_spec__2_#t~ret32 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~5 := __utac_acc__Specification3_spec__2_#t~ret32;havoc __utac_acc__Specification3_spec__2_#t~ret32; 18164805#L1440-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~5); 18164759#L1448-3 assume !(1 == ~expectedDirection~0); 18164755#L1449-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 18164753#L2977-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 18164751#L188-3 [2018-11-18 11:24:16,362 INFO L796 eck$LassoCheckResult]: Loop: 18164751#L188-3 assume true; 18164750#L188-1 assume !false; 18164749#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 18164748#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 18164747#L1963 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 18164746#L196 assume 1 != cleanup_~tmp___0~0; 18164622#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 18164612#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 18164607#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 18164595#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 18164571#L2264 isIdle_#t~ret75 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 18164353#L2277 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 18155336#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 18155334#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 18155331#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 18155312#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 18155166#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 18114394#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 18114395#L1327-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 2;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 18095992#L2109-46 assume !(0 == buttonForFloorIsPressed_~floorID); 18095986#L2113-46 assume !(1 == buttonForFloorIsPressed_~floorID); 18095977#L2117-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 18095964#L2130-46 __utac_acc__Specification3_spec__1_#t~ret24 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___2~1 := __utac_acc__Specification3_spec__1_#t~ret24;havoc __utac_acc__Specification3_spec__1_#t~ret24; 18095959#L1332-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~1;~expectedDirection~0 := 1; 18095953#L1411-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 18095952#L699-89 assume !(0 == isFloorCalling_~floorID); 18095950#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 18095949#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 18095947#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 18095946#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 18095943#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 18095944#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 18131154#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 18131155#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 18131147#L2854-8 assume !(0 != timeShift_~tmp___9~3); 18095558#L2945-12 assume !(1 == ~doorState~0); 18095559#L2945-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 18095550#L2296-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 18095551#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 18095547#L2300-8 assume !(0 != stopRequestedInDirection_~tmp~18); 18095545#L2306-8 assume !(~currentFloorID~0 < 0); 18095546#L2321-8 assume !(~currentFloorID~0 < 0); 18095541#L2334-8 assume !(~currentFloorID~0 < 1); 18095531#L2350-8 assume !(~currentFloorID~0 < 1); 18095465#L2363-8 assume ~currentFloorID~0 < 2; 18095453#L2365-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 2;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 18095454#L699-92 assume !(0 == isFloorCalling_~floorID); 18095443#L703-92 assume !(1 == isFloorCalling_~floorID); 18095444#L707-92 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 18095421#L726-92 stopRequestedInDirection_#t~ret79 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___2~3 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79; 18095422#L2369-8 assume 0 != stopRequestedInDirection_~tmp___2~3;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 18095655#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 18095377#L2953-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 18095379#L2672-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 18164771#L1273-21 continueInDirection_#t~ret87 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19 := continueInDirection_#t~ret87;havoc continueInDirection_#t~ret87; 18164770#L2676-36 assume !(0 != continueInDirection_~tmp~19); 18164769#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 18164768#L2688-25 assume { :end_inline_continueInDirection } true; 18164765#L2962-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 18164764#L1436-4 assume !(-1 == ~expectedDirection~0); 18164762#L1448-4 assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 18164760#L2144-14 __utac_acc__Specification3_spec__2_#t~ret33 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~12 := __utac_acc__Specification3_spec__2_#t~ret33;havoc __utac_acc__Specification3_spec__2_#t~ret33; 18164756#L1453-12 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~12); 18164754#L1449-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 18164752#L2977-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 18164751#L188-3 [2018-11-18 11:24:16,370 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:24:16,370 INFO L82 PathProgramCache]: Analyzing trace with hash -2023871882, now seen corresponding path program 4 times [2018-11-18 11:24:16,370 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:24:16,370 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:24:16,371 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:24:16,371 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:24:16,371 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:24:16,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:24:17,125 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:24:17,125 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:24:17,125 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:24:17,125 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:24:17,125 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:24:17,126 INFO L82 PathProgramCache]: Analyzing trace with hash 1589275745, now seen corresponding path program 1 times [2018-11-18 11:24:17,126 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:24:17,126 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:24:17,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:24:17,126 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 11:24:17,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:24:17,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 11:24:17,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 11:24:17,684 WARN L180 SmtUtils]: Spent 534.00 ms on a formula simplification. DAG size of input: 228 DAG size of output: 184 [2018-11-18 11:24:19,142 WARN L180 SmtUtils]: Spent 1.44 s on a formula simplification. DAG size of input: 152 DAG size of output: 141 [2018-11-18 11:24:19,145 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 11:24:19,145 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 11:24:19,145 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 11:24:19,145 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 11:24:19,145 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 11:24:19,145 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:19,146 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 11:24:19,146 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 11:24:19,146 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product01_true-unreach-call_true-termination.cil.c_Iteration31_Loop [2018-11-18 11:24:19,146 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 11:24:19,146 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 11:24:19,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,335 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,371 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,374 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,424 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,441 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,442 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,445 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,476 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,481 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,485 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,486 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,487 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,492 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,493 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,496 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,503 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,504 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,505 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,506 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,507 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,524 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,525 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,528 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,529 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,530 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,531 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:19,532 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:20,012 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 11:24:20,013 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,031 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,031 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,045 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,045 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0, ULTIMATE.start_isIdle_~retValue_acc~20=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0, ULTIMATE.start_isIdle_~retValue_acc~20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,069 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,069 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,084 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,084 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret30=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret30=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,105 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,105 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,107 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,107 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,133 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,133 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,145 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,145 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~calls_2~0=2, ULTIMATE.start_isFloorCalling_#res=2, ULTIMATE.start_stopRequestedInDirection_~tmp___2~3=2, ULTIMATE.start_isFloorCalling_~retValue_acc~5=2} Honda state: {~calls_2~0=2, ULTIMATE.start_isFloorCalling_#res=2, ULTIMATE.start_stopRequestedInDirection_~tmp___2~3=2, ULTIMATE.start_isFloorCalling_~retValue_acc~5=2} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,170 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,170 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,183 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,183 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,206 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,206 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,218 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,219 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,240 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,240 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,248 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,248 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret24=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,273 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,273 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,280 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,280 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=7, ~calls_0~0=7} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=7, ~calls_0~0=7} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,303 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,303 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,312 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,312 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,334 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,334 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,336 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,337 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret106=0} Honda state: {ULTIMATE.start_timeShift_#t~ret106=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,361 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,361 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,368 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,368 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret85=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret85=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,390 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,390 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,392 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,392 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~22=0} Honda state: {ULTIMATE.start_timeShift_~tmp~22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,414 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,414 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,417 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,417 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,441 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,441 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,444 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,444 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,469 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,470 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,479 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,479 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret21=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,504 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,505 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,508 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,508 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,534 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,534 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,538 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,538 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret27=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret27=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,560 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,560 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,564 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,564 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret109=0} Honda state: {ULTIMATE.start_timeShift_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,589 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,589 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,596 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,596 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,625 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,625 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,636 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,636 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2018-11-18 11:24:20,662 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,662 INFO L163 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,665 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,665 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~19=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~19=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,687 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,687 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,693 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,693 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ~floorButtons_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~20=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#res=0, ~floorButtons_1~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~20=0, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,717 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,717 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,724 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,725 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~3=1, ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=1} Honda state: {ULTIMATE.start_timeShift_~tmp___8~3=1, ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,746 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,746 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,749 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,749 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,770 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,770 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,781 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,781 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_timeShift_~tmp___9~3=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_timeShift_~tmp___9~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,805 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,805 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,820 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,821 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret77=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret77=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 115 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 115 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:20,846 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:20,846 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:20,856 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:20,856 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret74=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret74=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 116 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 116 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:21,184 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:21,184 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:21,188 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:21,188 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 117 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 117 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:21,210 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:21,211 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:21,213 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:21,214 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#in~floorID=2, ULTIMATE.start_isFloorCalling_~floorID=2} Honda state: {ULTIMATE.start_isFloorCalling_#in~floorID=2, ULTIMATE.start_isFloorCalling_~floorID=2} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 118 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 118 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:21,237 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:21,237 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:21,239 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:24:21,239 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret32=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret32=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 119 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 119 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:21,264 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:24:21,264 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e3e75653-dc3b-478f-9ef7-9111147463a9/bin-2019/uautomizer/z3 Starting monitored process 120 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 120 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:21,291 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 11:24:21,291 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:24:21,771 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 11:24:21,772 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 11:24:21,772 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 11:24:21,772 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 11:24:21,773 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 11:24:21,773 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 11:24:21,773 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:24:21,773 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 11:24:21,773 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 11:24:21,773 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product01_true-unreach-call_true-termination.cil.c_Iteration31_Loop [2018-11-18 11:24:21,773 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 11:24:21,773 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 11:24:21,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:21,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,007 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,045 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,048 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,049 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,050 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,051 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,053 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,054 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,057 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,106 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:24:22,602 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 11:24:22,602 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 11:24:22,602 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,603 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,603 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,603 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,603 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,603 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,604 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,604 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,608 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,608 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,609 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,609 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,609 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,609 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,609 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,609 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,609 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,610 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,610 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,610 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,610 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,610 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,610 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,611 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,611 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,611 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,611 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,611 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,611 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,611 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,612 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,612 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-18 11:24:22,612 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,612 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-18 11:24:22,612 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,614 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,614 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,614 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,614 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,614 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,614 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,615 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,615 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,615 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,615 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,615 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,615 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,615 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,616 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,616 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,616 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,616 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,616 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,616 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,616 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,617 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,617 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,617 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,617 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,617 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,617 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,617 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,618 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,618 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,618 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,618 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,618 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,618 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,618 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,619 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,619 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,619 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,619 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,619 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,619 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,619 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,620 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-18 11:24:22,620 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,620 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-18 11:24:22,620 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,621 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,621 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,621 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,621 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,621 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,622 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,622 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,622 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,622 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,622 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,622 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,623 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,623 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,623 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,623 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,623 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,623 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,623 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,623 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,623 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,624 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,624 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,624 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,624 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,624 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,624 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,624 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,624 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,625 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,625 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,625 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,625 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,625 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,625 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,625 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,626 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,626 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,627 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,627 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,627 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,627 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,627 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,627 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,627 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,627 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,628 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,628 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,628 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,628 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,628 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,628 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,628 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,629 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,629 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,629 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,629 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,629 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,629 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,629 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,630 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,630 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,630 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,630 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,630 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,630 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,630 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,631 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,631 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,631 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,631 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,631 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,631 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,631 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,631 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,632 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,632 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,632 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,632 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,632 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,632 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,632 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,632 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,633 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,633 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,633 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,633 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,633 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,633 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,633 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,633 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,634 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,634 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,634 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,634 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,634 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,634 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,634 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,634 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,635 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,635 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,635 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,635 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,635 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,635 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,635 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,636 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,636 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,636 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,636 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,636 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,636 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,637 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,637 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,637 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,637 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,637 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,637 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,637 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,637 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,638 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,638 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,638 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,638 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,638 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,638 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,638 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,639 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,639 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,639 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,639 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,639 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,639 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,639 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,639 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,639 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,640 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,640 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,640 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,640 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,640 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,640 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,640 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,641 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,641 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,642 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,642 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,642 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,642 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,642 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,642 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,642 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,643 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,643 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,643 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,643 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,643 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,643 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,643 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,643 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,644 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,644 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,644 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,644 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,644 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,644 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,645 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,645 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,645 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,645 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,645 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,645 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,645 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,645 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,646 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,646 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,646 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,646 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,646 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,646 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,646 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,647 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:24:22,647 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:24:22,647 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:24:22,647 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:24:22,647 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:24:22,647 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:24:22,647 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:24:22,647 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:24:22,648 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:24:22,649 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 11:24:22,651 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 11:24:22,651 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 11:24:22,651 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 11:24:22,651 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 11:24:22,652 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 11:24:22,652 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2018-11-18 11:24:22,652 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 11:24:22,919 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:24:23,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:24:23,074 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 11:24:23,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:24:23,116 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 11:24:23,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:24:23,137 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 11:24:23,137 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 570964 states and 1046306 transitions. cyclomatic complexity: 475365 Second operand 5 states. [2018-11-18 11:24:26,159 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 570964 states and 1046306 transitions. cyclomatic complexity: 475365. Second operand 5 states. Result 755497 states and 1381849 transitions. Complement of second has 8 states. [2018-11-18 11:24:26,160 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 11:24:26,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 11:24:26,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 9774 transitions. [2018-11-18 11:24:26,166 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9774 transitions. Stem has 202 letters. Loop has 65 letters. [2018-11-18 11:24:26,166 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 11:24:26,166 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9774 transitions. Stem has 267 letters. Loop has 65 letters. [2018-11-18 11:24:26,167 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 11:24:26,167 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9774 transitions. Stem has 202 letters. Loop has 130 letters. [2018-11-18 11:24:26,168 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 11:24:26,168 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 755497 states and 1381849 transitions. [2018-11-18 11:24:28,870 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 11:24:28,870 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 755497 states to 0 states and 0 transitions. [2018-11-18 11:24:28,870 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 11:24:28,870 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 11:24:28,870 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 11:24:28,871 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:24:28,871 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:24:28,871 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:24:28,871 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:24:28,871 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:24:28,871 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-18 11:24:28,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:24:28,871 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 11:24:28,871 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 11:24:28,871 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 11:24:28,872 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 11:24:28,872 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 11:24:28,872 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 11:24:28,872 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 11:24:28,872 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 11:24:28,872 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:24:28,872 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:24:28,872 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:24:28,872 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:24:28,872 INFO L442 BuchiCegarLoop]: ======== Iteration 32============ [2018-11-18 11:24:28,872 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 11:24:28,872 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 11:24:28,872 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 11:24:28,878 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 11:24:28 BoogieIcfgContainer [2018-11-18 11:24:28,878 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 11:24:28,878 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 11:24:28,878 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 11:24:28,878 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 11:24:28,879 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:16:26" (3/4) ... [2018-11-18 11:24:28,882 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 11:24:28,882 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 11:24:28,882 INFO L168 Benchmark]: Toolchain (without parser) took 494321.05 ms. Allocated memory was 1.0 GB in the beginning and 10.7 GB in the end (delta: 9.7 GB). Free memory was 955.8 MB in the beginning and 3.1 GB in the end (delta: -2.2 GB). Peak memory consumption was 7.5 GB. Max. memory is 11.5 GB. [2018-11-18 11:24:28,883 INFO L168 Benchmark]: CDTParser took 0.44 ms. Allocated memory is still 1.0 GB. Free memory is still 985.3 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 11:24:28,883 INFO L168 Benchmark]: CACSL2BoogieTranslator took 703.41 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.8 MB). Free memory was 955.8 MB in the beginning and 1.1 GB in the end (delta: -156.8 MB). Peak memory consumption was 60.6 MB. Max. memory is 11.5 GB. [2018-11-18 11:24:28,883 INFO L168 Benchmark]: Boogie Procedure Inliner took 187.32 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 52.3 MB). Peak memory consumption was 52.3 MB. Max. memory is 11.5 GB. [2018-11-18 11:24:28,883 INFO L168 Benchmark]: Boogie Preprocessor took 226.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 56.4 MB). Peak memory consumption was 56.4 MB. Max. memory is 11.5 GB. [2018-11-18 11:24:28,884 INFO L168 Benchmark]: RCFGBuilder took 10898.41 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 283.1 MB). Free memory was 1.0 GB in the beginning and 968.8 MB in the end (delta: 35.1 MB). Peak memory consumption was 321.0 MB. Max. memory is 11.5 GB. [2018-11-18 11:24:28,884 INFO L168 Benchmark]: BuchiAutomizer took 482297.78 ms. Allocated memory was 1.4 GB in the beginning and 10.7 GB in the end (delta: 9.3 GB). Free memory was 968.8 MB in the beginning and 3.1 GB in the end (delta: -2.1 GB). Peak memory consumption was 7.1 GB. Max. memory is 11.5 GB. [2018-11-18 11:24:28,884 INFO L168 Benchmark]: Witness Printer took 3.45 ms. Allocated memory is still 10.7 GB. Free memory is still 3.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 11:24:28,886 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.44 ms. Allocated memory is still 1.0 GB. Free memory is still 985.3 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 703.41 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.8 MB). Free memory was 955.8 MB in the beginning and 1.1 GB in the end (delta: -156.8 MB). Peak memory consumption was 60.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 187.32 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 52.3 MB). Peak memory consumption was 52.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 226.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 56.4 MB). Peak memory consumption was 56.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 10898.41 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 283.1 MB). Free memory was 1.0 GB in the beginning and 968.8 MB in the end (delta: 35.1 MB). Peak memory consumption was 321.0 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 482297.78 ms. Allocated memory was 1.4 GB in the beginning and 10.7 GB in the end (delta: 9.3 GB). Free memory was 968.8 MB in the beginning and 3.1 GB in the end (delta: -2.1 GB). Peak memory consumption was 7.1 GB. Max. memory is 11.5 GB. * Witness Printer took 3.45 ms. Allocated memory is still 10.7 GB. Free memory is still 3.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 33 terminating modules (31 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function -2 * currentFloorID + 1 and consists of 5 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 31 modules have a trivial ranking function, the largest among these consists of 9 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 482.2s and 32 iterations. TraceHistogramMax:1. Analysis of lassos took 41.8s. Construction of modules took 108.3s. Büchi inclusion checks took 58.3s. Highest rank in rank-based complementation 3. Minimization of det autom 20. Minimization of nondet autom 13. Automata minimization 124.0s AutomataMinimizationTime, 31 MinimizatonAttempts, 6102465 StatesRemovedByMinimization, 31 NontrivialMinimizations. Non-live state removal took 129.7s Buchi closure took 5.3s. Biggest automaton had 570964 states and ocurred in iteration 30. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 599630 SDtfs, 1229695 SDslu, 1026761 SDs, 0 SdLazy, 71413 SolverSat, 7443 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 108.3s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI29 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital199 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq220 hnf88 smp100 dnf224 smp73 tf102 neg99 sie101 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 2ms VariablesStem: 0 VariablesLoop: 1 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 115 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 2.6s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...