./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c6671d27cfc2bdc7710085525ce5a61867ea778d ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 12:52:39,985 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 12:52:39,986 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 12:52:39,994 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 12:52:39,994 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 12:52:39,995 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 12:52:39,996 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 12:52:39,997 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 12:52:39,998 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 12:52:39,999 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 12:52:40,000 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 12:52:40,000 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 12:52:40,001 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 12:52:40,002 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 12:52:40,003 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 12:52:40,003 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 12:52:40,004 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 12:52:40,006 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 12:52:40,008 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 12:52:40,009 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 12:52:40,010 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 12:52:40,011 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 12:52:40,013 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 12:52:40,013 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 12:52:40,014 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 12:52:40,014 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 12:52:40,015 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 12:52:40,016 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 12:52:40,017 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 12:52:40,018 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 12:52:40,018 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 12:52:40,019 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 12:52:40,019 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 12:52:40,019 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 12:52:40,020 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 12:52:40,021 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 12:52:40,021 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 12:52:40,032 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 12:52:40,032 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 12:52:40,033 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 12:52:40,033 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 12:52:40,033 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 12:52:40,034 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 12:52:40,034 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 12:52:40,034 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 12:52:40,034 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 12:52:40,034 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 12:52:40,034 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 12:52:40,034 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 12:52:40,034 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 12:52:40,035 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 12:52:40,036 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 12:52:40,036 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 12:52:40,036 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 12:52:40,039 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 12:52:40,039 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c6671d27cfc2bdc7710085525ce5a61867ea778d [2018-11-18 12:52:40,063 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 12:52:40,072 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 12:52:40,074 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 12:52:40,075 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 12:52:40,075 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 12:52:40,076 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c [2018-11-18 12:52:40,116 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/data/80df41950/2e54c2fbaa7a441ab693f3189683c096/FLAG72b46ccfb [2018-11-18 12:52:40,561 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 12:52:40,561 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/sv-benchmarks/c/product-lines/elevator_spec3_product25_true-unreach-call_true-termination.cil.c [2018-11-18 12:52:40,574 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/data/80df41950/2e54c2fbaa7a441ab693f3189683c096/FLAG72b46ccfb [2018-11-18 12:52:40,889 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/data/80df41950/2e54c2fbaa7a441ab693f3189683c096 [2018-11-18 12:52:40,891 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 12:52:40,892 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 12:52:40,893 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 12:52:40,893 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 12:52:40,896 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 12:52:40,897 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 12:52:40" (1/1) ... [2018-11-18 12:52:40,899 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@468c2198 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:40, skipping insertion in model container [2018-11-18 12:52:40,899 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 12:52:40" (1/1) ... [2018-11-18 12:52:40,908 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 12:52:40,961 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 12:52:41,373 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 12:52:41,384 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 12:52:41,471 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 12:52:41,508 INFO L195 MainTranslator]: Completed translation [2018-11-18 12:52:41,509 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41 WrapperNode [2018-11-18 12:52:41,509 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 12:52:41,510 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 12:52:41,510 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 12:52:41,510 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 12:52:41,517 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,537 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,710 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 12:52:41,710 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 12:52:41,710 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 12:52:41,710 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 12:52:41,719 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,719 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,746 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,746 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,807 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,872 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,902 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... [2018-11-18 12:52:41,942 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 12:52:41,943 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 12:52:41,943 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 12:52:41,943 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 12:52:41,944 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:52:41,986 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 12:52:41,986 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 12:52:41,986 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 12:52:49,222 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 12:52:49,222 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:52:49 BoogieIcfgContainer [2018-11-18 12:52:49,222 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 12:52:49,223 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 12:52:49,223 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 12:52:49,225 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 12:52:49,226 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 12:52:49,226 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 12:52:40" (1/3) ... [2018-11-18 12:52:49,227 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5cb98734 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 12:52:49, skipping insertion in model container [2018-11-18 12:52:49,227 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 12:52:49,227 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:52:41" (2/3) ... [2018-11-18 12:52:49,227 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5cb98734 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 12:52:49, skipping insertion in model container [2018-11-18 12:52:49,227 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 12:52:49,228 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:52:49" (3/3) ... [2018-11-18 12:52:49,229 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product25_true-unreach-call_true-termination.cil.c [2018-11-18 12:52:49,262 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 12:52:49,262 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 12:52:49,262 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 12:52:49,262 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 12:52:49,263 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 12:52:49,263 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 12:52:49,263 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 12:52:49,263 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 12:52:49,263 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 12:52:49,318 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6474 states. [2018-11-18 12:52:49,400 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1311 [2018-11-18 12:52:49,401 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:52:49,401 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:52:49,415 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:52:49,415 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:52:49,415 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 12:52:49,415 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6474 states. [2018-11-18 12:52:49,450 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1311 [2018-11-18 12:52:49,450 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:52:49,450 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:52:49,453 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:52:49,453 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:52:49,460 INFO L794 eck$LassoCheckResult]: Stem: 1240#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5865#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 873#L1098true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5526#L1091true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 718#L1106true main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1073#L1462true assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 5623#L1438true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4239#L487true assume { :end_inline_initFloors } true; 793#L1628true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1159#L3282true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4133#L3307true bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 910#L765true assume 0 == initPersonOnFloor_~floor; 241#L766true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3656#L873-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5627#L557true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 879#L569-2true assume { :end_inline_callOnFloor } true; 5633#L909true assume { :end_inline_initPersonOnFloor } true; 1450#L1183true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 12#L1832true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1477#L1884true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 308#L3076true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4955#L3138true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2164#L1849-5true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1208#L1870-5true __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 4558#L3142true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6387#L3182true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4884#L494true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3640#L521true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3098#L2445true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3749#L2457true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4483#L2596true assume !(0 != timeShift_~tmp___9~2); 820#L2687true assume !(1 == ~doorState~0); 749#L2687-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2684#L2036true assume !(1 == stopRequestedInDirection_~dir); 2016#L2205true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 74#L2358true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1079#L2695true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1496#L2412true assume !(1 == ~currentHeading~0); 4396#L2422true assume !(0 == ~currentFloorID~0); 4378#L2422-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4160#L2428-1true assume { :end_inline_continueInDirection } true; 231#L2704-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5570#L3207true assume !(-1 == ~expectedDirection~0); 684#L3219true assume !(1 == ~expectedDirection~0); 716#L3220true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 543#L2719true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 10#L1832-1true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1469#L1884-3true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 306#L3076-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 373#L3077-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2154#L1849-11true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1202#L1870-11true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2091#L3081-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6385#L3182-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5024#L494-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3591#L521-21true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3104#L2445-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3752#L2457-1true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4484#L2596-2true assume !(0 != timeShift_~tmp___9~2); 752#L2687-3true assume !(1 == ~doorState~0); 753#L2687-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2685#L2036-2true assume !(1 == stopRequestedInDirection_~dir); 2019#L2205-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 109#L2358-2true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1084#L2695-2true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1485#L2412-3true assume !(1 == ~currentHeading~0); 4365#L2422-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4367#L2422-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4158#L2428-7true assume { :end_inline_continueInDirection } true; 236#L2704-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5579#L3207-1true assume !(-1 == ~expectedDirection~0); 683#L3219-1true assume !(1 == ~expectedDirection~0); 719#L3220-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 524#L2719-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 15#L1832-2true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1472#L1884-6true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 309#L3076-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 372#L3077-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2133#L1849-22true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1193#L1870-22true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2094#L3081-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6392#L3182-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4953#L494-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3742#L521-42true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3101#L2445-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3750#L2457-2true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4489#L2596-4true assume !(0 != timeShift_~tmp___9~2); 746#L2687-6true assume !(1 == ~doorState~0); 747#L2687-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2696#L2036-4true assume !(1 == stopRequestedInDirection_~dir); 1996#L2205-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 110#L2358-4true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1067#L2695-4true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1489#L2412-6true assume !(1 == ~currentHeading~0); 4339#L2422-18true assume !(0 == ~currentFloorID~0); 4342#L2422-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5128#L2428-13true assume { :end_inline_continueInDirection } true; 227#L2704-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5575#L3207-2true assume !(-1 == ~expectedDirection~0); 687#L3219-2true assume !(1 == ~expectedDirection~0); 715#L3220-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 527#L2719-2true assume { :end_inline_timeShift } true; 5417#L1251true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1164#L3282-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4127#L3307-1true bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 911#L765-1true assume 0 == initPersonOnFloor_~floor; 242#L766-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3658#L873-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5628#L557-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 874#L569-5true assume { :end_inline_callOnFloor } true; 5634#L909-1true assume { :end_inline_initPersonOnFloor } true; 1439#L1183-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 21#L1832-3true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1461#L1884-9true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 311#L3076-3true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4969#L3138-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1983#L1849-38true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1253#L1870-38true __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 4543#L3142-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6395#L3182-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4804#L494-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3690#L521-63true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3109#L2445-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3753#L2457-3true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4331#L2596-6true assume !(0 != timeShift_~tmp___9~2); 748#L2687-9true assume !(1 == ~doorState~0); 744#L2687-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2669#L2036-6true assume !(1 == stopRequestedInDirection_~dir); 2001#L2205-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 118#L2358-6true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1072#L2695-6true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1479#L2412-9true assume !(1 == ~currentHeading~0); 4204#L2422-27true assume !(0 == ~currentFloorID~0); 4194#L2422-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5097#L2428-19true assume { :end_inline_continueInDirection } true; 230#L2704-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5558#L3207-3true assume !(-1 == ~expectedDirection~0); 685#L3219-3true assume !(1 == ~expectedDirection~0); 725#L3220-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 531#L2719-3true assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 5610#L1268-3true [2018-11-18 12:52:49,468 INFO L796 eck$LassoCheckResult]: Loop: 5610#L1268-3true assume true; 5609#L1268-1true assume !false; 5588#L1269true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5494#L1272true assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 670#L1659true cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 787#L1276true assume 1 != cleanup_~tmp___0~0; 788#L1276-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4727#L494-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6034#L521-84true anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 5841#L1940true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 157#L2004true isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 466#L2017true cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1048#L1288true assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 5#L1832-4true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1468#L1884-12true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 315#L3076-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4942#L3138-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1960#L1849-49true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1241#L1870-49true __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 4527#L3142-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6391#L3182-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4710#L494-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6017#L521-89true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3081#L2445-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3756#L2457-4true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4336#L2596-8true assume !(0 != timeShift_~tmp___9~2); 743#L2687-12true assume 1 == ~doorState~0;~doorState~0 := 0; 745#L2687-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2678#L2036-8true assume !(1 == stopRequestedInDirection_~dir); 2010#L2205-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 103#L2358-8true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1075#L2695-8true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1484#L2412-12true assume !(1 == ~currentHeading~0); 4188#L2422-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4192#L2422-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5084#L2428-25true assume { :end_inline_continueInDirection } true; 218#L2704-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5560#L3207-4true assume !(-1 == ~expectedDirection~0); 686#L3219-4true assume !(1 == ~expectedDirection~0); 721#L3220-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 529#L2719-4true assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 5610#L1268-3true [2018-11-18 12:52:49,472 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:52:49,473 INFO L82 PathProgramCache]: Analyzing trace with hash 409674364, now seen corresponding path program 1 times [2018-11-18 12:52:49,475 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:52:49,475 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:52:49,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:52:49,511 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:52:49,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:52:49,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:52:50,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:52:50,383 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:52:50,383 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:52:50,386 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:52:50,386 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:52:50,386 INFO L82 PathProgramCache]: Analyzing trace with hash 1071933986, now seen corresponding path program 1 times [2018-11-18 12:52:50,386 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:52:50,386 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:52:50,387 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:52:50,387 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:52:50,387 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:52:50,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:52:50,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:52:50,470 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:52:50,470 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 12:52:50,471 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:52:50,480 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 12:52:50,481 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 12:52:50,482 INFO L87 Difference]: Start difference. First operand 6474 states. Second operand 6 states. [2018-11-18 12:53:01,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:01,242 INFO L93 Difference]: Finished difference Result 16300 states and 30137 transitions. [2018-11-18 12:53:01,242 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-18 12:53:01,244 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16300 states and 30137 transitions. [2018-11-18 12:53:01,312 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3761 [2018-11-18 12:53:01,370 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16300 states to 16212 states and 30038 transitions. [2018-11-18 12:53:01,371 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16212 [2018-11-18 12:53:01,382 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16212 [2018-11-18 12:53:01,383 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16212 states and 30038 transitions. [2018-11-18 12:53:01,405 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:01,405 INFO L705 BuchiCegarLoop]: Abstraction has 16212 states and 30038 transitions. [2018-11-18 12:53:01,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16212 states and 30038 transitions. [2018-11-18 12:53:01,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16212 to 10810. [2018-11-18 12:53:01,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10810 states. [2018-11-18 12:53:01,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10810 states to 10810 states and 20045 transitions. [2018-11-18 12:53:01,596 INFO L728 BuchiCegarLoop]: Abstraction has 10810 states and 20045 transitions. [2018-11-18 12:53:01,597 INFO L608 BuchiCegarLoop]: Abstraction has 10810 states and 20045 transitions. [2018-11-18 12:53:01,597 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 12:53:01,597 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10810 states and 20045 transitions. [2018-11-18 12:53:01,627 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2420 [2018-11-18 12:53:01,627 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:01,627 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:01,630 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:01,630 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:01,631 INFO L794 eck$LassoCheckResult]: Stem: 24503#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 24504#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 24120#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 24121#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 23923#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 23924#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 24282#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 27956#L487 assume { :end_inline_initFloors } true; 24019#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 24020#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 24360#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 24148#L765 assume 0 == initPersonOnFloor_~floor; 23217#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 22837#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 27391#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 24127#L569-2 assume { :end_inline_callOnFloor } true; 24129#L909 assume { :end_inline_initPersonOnFloor } true; 24858#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22831#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22832#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 23338#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23339#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 25757#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 24446#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 24447#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 24493#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28407#L494 assume !(0 == isFloorCalling_~floorID); 28383#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26287#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26656#L2445 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26657#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 27490#L2596 assume !(0 != timeShift_~tmp___9~2); 24065#L2687 assume !(1 == ~doorState~0); 23966#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23967#L2036 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 26129#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 25970#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 23011#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 23012#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 24287#L2412 assume !(1 == ~currentHeading~0); 24938#L2422 assume !(0 == ~currentFloorID~0); 24872#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27851#L2428-1 assume { :end_inline_continueInDirection } true; 27842#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 30434#L3207 assume !(-1 == ~expectedDirection~0); 30431#L3219 assume !(1 == ~expectedDirection~0); 30429#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 30428#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 30427#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 30426#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 30420#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 30418#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 30413#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 25751#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 24438#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 24439#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 24482#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28497#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26175#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26664#L2445-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26665#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 27493#L2596-2 assume !(0 != timeShift_~tmp___9~2); 23970#L2687-3 assume !(1 == ~doorState~0); 23971#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23972#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 26130#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 33299#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 33433#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 24916#L2412-3 assume !(1 == ~currentHeading~0); 24918#L2422-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24842#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27848#L2428-7 assume { :end_inline_continueInDirection } true; 23211#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 23212#L3207-1 assume !(-1 == ~expectedDirection~0); 23847#L3219-1 assume !(1 == ~expectedDirection~0); 23848#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23741#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22839#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22840#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 23341#L3076-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 23342#L3077-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23505#L3087-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 25260#L1849-23 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 24414#L1870-23 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 24415#L3092-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 24485#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 29443#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26471#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26660#L2445-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26661#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 27491#L2596-4 assume !(0 != timeShift_~tmp___9~2); 23962#L2687-6 assume !(1 == ~doorState~0); 23963#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23964#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 26142#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 33347#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 33345#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 24925#L2412-6 assume !(1 == ~currentHeading~0); 24927#L2422-18 assume !(0 == ~currentFloorID~0); 24802#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 28024#L2428-13 assume { :end_inline_continueInDirection } true; 23198#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 23199#L3207-2 assume !(-1 == ~expectedDirection~0); 23859#L3219-2 assume !(1 == ~expectedDirection~0); 23860#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23744#L2719-2 assume { :end_inline_timeShift } true; 23745#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 24380#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 24357#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 24150#L765-1 assume 0 == initPersonOnFloor_~floor; 23218#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 22851#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 27393#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 24122#L569-5 assume { :end_inline_callOnFloor } true; 24123#L909-1 assume { :end_inline_initPersonOnFloor } true; 24837#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22856#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22857#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 23347#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23348#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 27075#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 27076#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 27685#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 29220#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24459#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 29445#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26410#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26670#L2445-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26671#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 27494#L2596-6 assume !(0 != timeShift_~tmp___9~2); 23965#L2687-9 assume !(1 == ~doorState~0); 23959#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23960#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 26114#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 33513#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 33511#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 24901#L2412-9 assume !(1 == ~currentHeading~0); 24902#L2422-27 assume !(0 == ~currentFloorID~0); 24800#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27892#L2428-19 assume { :end_inline_continueInDirection } true; 23202#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 23203#L3207-3 assume !(-1 == ~expectedDirection~0); 23853#L3219-3 assume !(1 == ~expectedDirection~0); 23854#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23750#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 23748#L1268-3 [2018-11-18 12:53:01,631 INFO L796 eck$LassoCheckResult]: Loop: 23748#L1268-3 assume true; 28987#L1268-1 assume !false; 28982#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 28919#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 23828#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 23829#L1276 assume 1 != cleanup_~tmp___0~0; 24013#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 24014#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26848#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 29209#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 23117#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 23118#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 23685#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22812#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22813#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 23359#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23360#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 27071#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 27072#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 27686#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 29281#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24463#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 29442#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26822#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26638#L2445-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26639#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 27497#L2596-8 assume !(0 != timeShift_~tmp___9~2); 23957#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 23958#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23961#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 26122#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 33303#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 33469#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 33391#L2412-12 assume !(1 == ~currentHeading~0); 33390#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24757#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27890#L2428-25 assume { :end_inline_continueInDirection } true; 23187#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 23188#L3207-4 assume !(-1 == ~expectedDirection~0); 23856#L3219-4 assume !(1 == ~expectedDirection~0); 23857#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23747#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 23748#L1268-3 [2018-11-18 12:53:01,638 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:01,638 INFO L82 PathProgramCache]: Analyzing trace with hash 701142425, now seen corresponding path program 1 times [2018-11-18 12:53:01,638 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:01,638 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:01,639 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:01,639 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:01,639 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:01,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:02,506 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:02,506 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:02,507 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:02,507 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:02,507 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:02,507 INFO L82 PathProgramCache]: Analyzing trace with hash 1281184766, now seen corresponding path program 1 times [2018-11-18 12:53:02,507 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:02,508 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:02,508 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:02,508 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:02,508 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:02,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:02,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:02,576 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:02,576 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 12:53:02,577 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:02,577 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 12:53:02,577 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-18 12:53:02,577 INFO L87 Difference]: Start difference. First operand 10810 states and 20045 transitions. cyclomatic complexity: 9236 Second operand 6 states. [2018-11-18 12:53:03,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:03,008 INFO L93 Difference]: Finished difference Result 19586 states and 36361 transitions. [2018-11-18 12:53:03,008 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-18 12:53:03,009 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19586 states and 36361 transitions. [2018-11-18 12:53:03,058 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4471 [2018-11-18 12:53:03,111 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19586 states to 19586 states and 36361 transitions. [2018-11-18 12:53:03,111 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19586 [2018-11-18 12:53:03,121 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19586 [2018-11-18 12:53:03,121 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19586 states and 36361 transitions. [2018-11-18 12:53:03,134 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:03,135 INFO L705 BuchiCegarLoop]: Abstraction has 19586 states and 36361 transitions. [2018-11-18 12:53:03,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19586 states and 36361 transitions. [2018-11-18 12:53:03,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19586 to 10828. [2018-11-18 12:53:03,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10828 states. [2018-11-18 12:53:03,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10828 states to 10828 states and 20063 transitions. [2018-11-18 12:53:03,269 INFO L728 BuchiCegarLoop]: Abstraction has 10828 states and 20063 transitions. [2018-11-18 12:53:03,269 INFO L608 BuchiCegarLoop]: Abstraction has 10828 states and 20063 transitions. [2018-11-18 12:53:03,269 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 12:53:03,269 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10828 states and 20063 transitions. [2018-11-18 12:53:03,290 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2424 [2018-11-18 12:53:03,290 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:03,290 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:03,293 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:03,293 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:03,293 INFO L794 eck$LassoCheckResult]: Stem: 54929#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 54930#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 54541#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 54542#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 54348#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 54349#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 54707#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 58352#L487 assume { :end_inline_initFloors } true; 54440#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 54441#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 54785#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 54570#L765 assume 0 == initPersonOnFloor_~floor; 53643#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 53263#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 57808#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 54548#L569-2 assume { :end_inline_callOnFloor } true; 54550#L909 assume { :end_inline_initPersonOnFloor } true; 55280#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 53257#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 53258#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 53763#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 53764#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 56190#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 54871#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 54872#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 54919#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58802#L494 assume !(0 == isFloorCalling_~floorID); 58775#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56714#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 57083#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 56195#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 54861#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 54862#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 57895#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 57896#L2596 assume !(0 != timeShift_~tmp___9~2); 54486#L2687 assume !(1 == ~doorState~0); 54391#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54392#L2036 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 56556#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 56395#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 53437#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 53438#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 54712#L2412 assume !(1 == ~currentHeading~0); 55359#L2422 assume !(0 == ~currentFloorID~0); 55294#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58252#L2428-1 assume { :end_inline_continueInDirection } true; 58243#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 60259#L3207 assume !(-1 == ~expectedDirection~0); 60255#L3219 assume !(1 == ~expectedDirection~0); 60253#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 60252#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 60251#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 60250#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 60249#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 60247#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 60245#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 60243#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 60237#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 60235#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 60228#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 60227#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 60222#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 60221#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 60220#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 60211#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 60209#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 60208#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 60207#L2596-2 assume !(0 != timeShift_~tmp___9~2); 60206#L2687-3 assume !(1 == ~doorState~0); 60205#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 60204#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 60160#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 60155#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 60153#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 60154#L2412-3 assume !(1 == ~currentHeading~0); 60288#L2422-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 55264#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58249#L2428-7 assume { :end_inline_continueInDirection } true; 53637#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 53638#L3207-1 assume !(-1 == ~expectedDirection~0); 54272#L3219-1 assume !(1 == ~expectedDirection~0); 54273#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 54350#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 60382#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 60381#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 60379#L3076-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 60380#L3077-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 60449#L3087-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 60445#L1849-23 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 60437#L1870-23 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 60355#L3092-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 59807#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58840#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56898#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 57087#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 56142#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 54961#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 54962#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58120#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 60550#L2596-4 assume !(0 != timeShift_~tmp___9~2); 54387#L2687-6 assume !(1 == ~doorState~0); 54388#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54389#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 56568#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 60048#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 60046#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 60044#L2412-6 assume !(1 == ~currentHeading~0); 60042#L2422-18 assume !(0 == ~currentFloorID~0); 55224#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58422#L2428-13 assume { :end_inline_continueInDirection } true; 58901#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 61370#L3207-2 assume !(-1 == ~expectedDirection~0); 61367#L3219-2 assume !(1 == ~expectedDirection~0); 61365#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 54169#L2719-2 assume { :end_inline_timeShift } true; 54170#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 54805#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 54782#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 54572#L765-1 assume 0 == initPersonOnFloor_~floor; 53644#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 53277#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 57810#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 54543#L569-5 assume { :end_inline_callOnFloor } true; 54544#L909-1 assume { :end_inline_initPersonOnFloor } true; 55259#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 53282#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 53283#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 53772#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 53773#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 57496#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 57497#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 58087#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 59590#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 60024#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 60023#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 60017#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 60016#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 60014#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 60009#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 60006#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 60005#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 60002#L2596-6 assume !(0 != timeShift_~tmp___9~2); 60001#L2687-9 assume !(1 == ~doorState~0); 60000#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 59999#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 59879#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 59846#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 59843#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 59841#L2412-9 assume !(1 == ~currentHeading~0); 59839#L2422-27 assume !(0 == ~currentFloorID~0); 55222#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58291#L2428-19 assume { :end_inline_continueInDirection } true; 53628#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 53629#L3207-3 assume !(-1 == ~expectedDirection~0); 54278#L3219-3 assume !(1 == ~expectedDirection~0); 54279#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 54175#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 54173#L1268-3 [2018-11-18 12:53:03,294 INFO L796 eck$LassoCheckResult]: Loop: 54173#L1268-3 assume true; 59358#L1268-1 assume !false; 59350#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 59282#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 54253#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 54254#L1276 assume 1 != cleanup_~tmp___0~0; 54434#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 54435#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57276#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 59580#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 53543#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 53544#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 54110#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 53238#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 53239#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 53784#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 53785#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 57492#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 57493#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 58088#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 59652#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 54889#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 59930#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 59924#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 59919#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 59917#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 59894#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 59891#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 59889#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 59887#L2596-8 assume !(0 != timeShift_~tmp___9~2); 59885#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 59883#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 59880#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 59861#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 59845#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 59842#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 59840#L2412-12 assume !(1 == ~currentHeading~0); 59838#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 55179#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58289#L2428-25 assume { :end_inline_continueInDirection } true; 53613#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 53614#L3207-4 assume !(-1 == ~expectedDirection~0); 54281#L3219-4 assume !(1 == ~expectedDirection~0); 54282#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 54172#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 54173#L1268-3 [2018-11-18 12:53:03,300 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:03,301 INFO L82 PathProgramCache]: Analyzing trace with hash -125261591, now seen corresponding path program 1 times [2018-11-18 12:53:03,301 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:03,301 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:03,301 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:03,302 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:03,302 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:03,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:04,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:04,054 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:04,055 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:04,055 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:04,055 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:04,055 INFO L82 PathProgramCache]: Analyzing trace with hash -1611690819, now seen corresponding path program 1 times [2018-11-18 12:53:04,055 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:04,055 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:04,056 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:04,056 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:04,056 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:04,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:04,102 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:04,102 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:04,102 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 12:53:04,102 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:04,103 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 12:53:04,103 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-18 12:53:04,103 INFO L87 Difference]: Start difference. First operand 10828 states and 20063 transitions. cyclomatic complexity: 9236 Second operand 7 states. [2018-11-18 12:53:11,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:11,899 INFO L93 Difference]: Finished difference Result 67520 states and 125500 transitions. [2018-11-18 12:53:11,899 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-11-18 12:53:11,900 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 67520 states and 125500 transitions. [2018-11-18 12:53:12,045 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24442 [2018-11-18 12:53:12,169 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 67520 states to 67520 states and 125500 transitions. [2018-11-18 12:53:12,169 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 67520 [2018-11-18 12:53:12,199 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 67520 [2018-11-18 12:53:12,199 INFO L73 IsDeterministic]: Start isDeterministic. Operand 67520 states and 125500 transitions. [2018-11-18 12:53:12,228 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:12,228 INFO L705 BuchiCegarLoop]: Abstraction has 67520 states and 125500 transitions. [2018-11-18 12:53:12,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67520 states and 125500 transitions. [2018-11-18 12:53:12,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67520 to 21615. [2018-11-18 12:53:12,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 21615 states. [2018-11-18 12:53:12,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21615 states to 21615 states and 40041 transitions. [2018-11-18 12:53:12,514 INFO L728 BuchiCegarLoop]: Abstraction has 21615 states and 40041 transitions. [2018-11-18 12:53:12,514 INFO L608 BuchiCegarLoop]: Abstraction has 21615 states and 40041 transitions. [2018-11-18 12:53:12,514 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 12:53:12,514 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21615 states and 40041 transitions. [2018-11-18 12:53:12,548 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4858 [2018-11-18 12:53:12,549 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:12,549 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:12,551 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:12,551 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:12,552 INFO L794 eck$LassoCheckResult]: Stem: 133352#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 133353#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 132952#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 132953#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 132751#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 132752#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 133114#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 136926#L487 assume { :end_inline_initFloors } true; 132850#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 132851#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 133201#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 132980#L765 assume 0 == initPersonOnFloor_~floor; 132044#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 131663#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 136322#L557 assume !(0 == callOnFloor_~floorID); 138136#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 132959#L569-2 assume { :end_inline_callOnFloor } true; 132961#L909 assume { :end_inline_initPersonOnFloor } true; 133715#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 131657#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 131658#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 132162#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 132163#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 134635#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 133287#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 133288#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 138683#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 138684#L494 assume !(0 == isFloorCalling_~floorID); 137408#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 135181#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 135550#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 135552#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 133277#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 133278#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 138729#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 138730#L2596 assume !(0 != timeShift_~tmp___9~2); 132896#L2687 assume !(1 == ~doorState~0); 132796#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 132797#L2036 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 135020#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 134847#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 131837#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 131838#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 133119#L2412 assume !(1 == ~currentHeading~0); 133795#L2422 assume !(0 == ~currentFloorID~0); 133729#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 136819#L2428-1 assume { :end_inline_continueInDirection } true; 136809#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 138112#L3207 assume !(-1 == ~expectedDirection~0); 132926#L3219 assume !(1 == ~expectedDirection~0); 141278#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 132587#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 131652#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 131653#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 133750#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 132330#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 132332#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 134109#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 133279#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 133280#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 133327#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 138681#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 135067#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 140802#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 134612#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 133253#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 133254#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 136677#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 139918#L2596-2 assume !(0 != timeShift_~tmp___9~2); 132800#L2687-3 assume !(1 == ~doorState~0); 132801#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 132802#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 135021#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 140904#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 133121#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 133123#L2412-3 assume !(1 == ~currentHeading~0); 133775#L2422-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 133699#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 136815#L2428-7 assume { :end_inline_continueInDirection } true; 136816#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 141899#L3207-1 assume !(-1 == ~expectedDirection~0); 141895#L3219-1 assume !(1 == ~expectedDirection~0); 141882#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 141859#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 141852#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 141842#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 141841#L3076-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 141839#L3077-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 141838#L3087-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 141823#L1849-23 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 141812#L1870-23 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 141313#L3092-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 138997#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 138994#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 138991#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 138990#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 138987#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 138984#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 138983#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 138982#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 138981#L2596-4 assume !(0 != timeShift_~tmp___9~2); 138980#L2687-6 assume !(1 == ~doorState~0); 138979#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 138977#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 138935#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 138928#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 138927#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 133782#L2412-6 assume !(1 == ~currentHeading~0); 133784#L2422-18 assume !(0 == ~currentFloorID~0); 133649#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 137008#L2428-13 assume { :end_inline_continueInDirection } true; 142089#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 142046#L3207-2 assume !(-1 == ~expectedDirection~0); 142041#L3219-2 assume !(1 == ~expectedDirection~0); 142036#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 142027#L2719-2 assume { :end_inline_timeShift } true; 142020#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 142012#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 142002#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 142000#L765-1 assume 0 == initPersonOnFloor_~floor; 141955#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 141924#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 141922#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 132954#L569-5 assume { :end_inline_callOnFloor } true; 132955#L909-1 assume { :end_inline_initPersonOnFloor } true; 133694#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 131682#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 131683#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 132171#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 132172#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 134483#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 133377#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 133378#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 133300#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 137389#L494-63 assume !(0 == isFloorCalling_~floorID); 137235#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 135304#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 136363#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 134470#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 133362#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 133363#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 136685#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 139499#L2596-6 assume !(0 != timeShift_~tmp___9~2); 132795#L2687-9 assume !(1 == ~doorState~0); 132787#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 132788#L2036-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 138588#L1068-15 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 138589#L2040-6 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 145361#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 145404#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 145403#L2412-9 assume !(1 == ~currentHeading~0); 145333#L2422-27 assume !(0 == ~currentFloorID~0); 136861#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 136862#L2428-19 assume { :end_inline_continueInDirection } true; 145324#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 145319#L3207-3 assume !(-1 == ~expectedDirection~0); 145315#L3219-3 assume !(1 == ~expectedDirection~0); 145313#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 145311#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 145310#L1268-3 [2018-11-18 12:53:12,552 INFO L796 eck$LassoCheckResult]: Loop: 145310#L1268-3 assume true; 145309#L1268-1 assume !false; 145308#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 145307#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 145306#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 145305#L1276 assume 1 != cleanup_~tmp___0~0; 145217#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 145215#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 145216#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 145179#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 145174#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 145173#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 145172#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 145171#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 145170#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 145169#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 145166#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 145162#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 145142#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 145132#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 145124#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 145121#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 137288#L494-89 assume !(0 == isFloorCalling_~floorID); 137290#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 147701#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 147700#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 147699#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 147694#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 147692#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 147691#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 147688#L2596-8 assume !(0 != timeShift_~tmp___9~2); 147686#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 147679#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 147668#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 147655#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 147640#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 147622#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 147623#L2412-12 assume !(1 == ~currentHeading~0); 143978#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 133600#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 136859#L2428-25 assume { :end_inline_continueInDirection } true; 147580#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 145326#L3207-4 assume !(-1 == ~expectedDirection~0); 145322#L3219-4 assume !(1 == ~expectedDirection~0); 145317#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 145312#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 145310#L1268-3 [2018-11-18 12:53:12,559 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:12,559 INFO L82 PathProgramCache]: Analyzing trace with hash -728158520, now seen corresponding path program 1 times [2018-11-18 12:53:12,560 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:12,560 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:12,560 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:12,560 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:12,561 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:12,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:13,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:13,321 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:13,321 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:13,322 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:13,322 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:13,322 INFO L82 PathProgramCache]: Analyzing trace with hash -389656156, now seen corresponding path program 1 times [2018-11-18 12:53:13,322 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:13,322 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:13,323 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:13,323 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:13,323 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:13,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:13,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:13,376 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:13,376 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 12:53:13,376 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:13,377 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 12:53:13,377 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 12:53:13,377 INFO L87 Difference]: Start difference. First operand 21615 states and 40041 transitions. cyclomatic complexity: 18427 Second operand 7 states. [2018-11-18 12:53:19,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:19,841 INFO L93 Difference]: Finished difference Result 45299 states and 83391 transitions. [2018-11-18 12:53:19,841 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-18 12:53:19,841 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45299 states and 83391 transitions. [2018-11-18 12:53:20,055 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 10858 [2018-11-18 12:53:20,120 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45299 states to 45299 states and 83391 transitions. [2018-11-18 12:53:20,120 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45299 [2018-11-18 12:53:20,138 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45299 [2018-11-18 12:53:20,138 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45299 states and 83391 transitions. [2018-11-18 12:53:20,157 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:20,157 INFO L705 BuchiCegarLoop]: Abstraction has 45299 states and 83391 transitions. [2018-11-18 12:53:20,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45299 states and 83391 transitions. [2018-11-18 12:53:20,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45299 to 29655. [2018-11-18 12:53:20,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 29655 states. [2018-11-18 12:53:20,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29655 states to 29655 states and 54685 transitions. [2018-11-18 12:53:20,445 INFO L728 BuchiCegarLoop]: Abstraction has 29655 states and 54685 transitions. [2018-11-18 12:53:20,445 INFO L608 BuchiCegarLoop]: Abstraction has 29655 states and 54685 transitions. [2018-11-18 12:53:20,445 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 12:53:20,445 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29655 states and 54685 transitions. [2018-11-18 12:53:20,498 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6978 [2018-11-18 12:53:20,498 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:20,498 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:20,500 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:20,501 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:20,501 INFO L794 eck$LassoCheckResult]: Stem: 200339#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 200340#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 199910#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 199911#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 199707#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 199708#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 200087#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 204035#L487 assume { :end_inline_initFloors } true; 199807#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 199808#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 200177#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 199938#L765 assume 0 == initPersonOnFloor_~floor; 198991#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 198611#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 203434#L557 assume !(0 == callOnFloor_~floorID); 205305#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 199917#L569-2 assume { :end_inline_callOnFloor } true; 199919#L909 assume { :end_inline_initPersonOnFloor } true; 200715#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 198605#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 198606#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 199114#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 199115#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 201702#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 200274#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 200275#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 205897#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 205898#L494 assume !(0 == isFloorCalling_~floorID); 204579#L498 assume !(1 == isFloorCalling_~floorID); 204580#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 203407#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 203408#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 201707#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 200264#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 200265#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 203791#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 205947#L2596 assume !(0 != timeShift_~tmp___9~2); 199853#L2687 assume !(1 == ~doorState~0); 199751#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 199752#L2036 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 202107#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 205900#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 207934#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 207933#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 207931#L2412 assume !(1 == ~currentHeading~0); 207930#L2422 assume !(0 == ~currentFloorID~0); 207928#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 203929#L2428-1 assume { :end_inline_continueInDirection } true; 203919#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 207890#L3207 assume !(-1 == ~expectedDirection~0); 207887#L3219 assume !(1 == ~expectedDirection~0); 207883#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 207880#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 207877#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 207871#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 207857#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 207855#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 207848#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 207824#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 207795#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 207779#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 207770#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 207764#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 207759#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 207755#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 207757#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 207760#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 207758#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 207678#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 207679#L2596-2 assume !(0 != timeShift_~tmp___9~2); 210458#L2687-3 assume !(1 == ~doorState~0); 210450#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 210443#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 210427#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 210422#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 210419#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 210418#L2412-3 assume !(1 == ~currentHeading~0); 210417#L2422-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 200695#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 204137#L2428-7 assume { :end_inline_continueInDirection } true; 206013#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 206011#L3207-1 assume !(-1 == ~expectedDirection~0); 206008#L3219-1 assume !(1 == ~expectedDirection~0); 206006#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 206005#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 206004#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 206003#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 206001#L3076-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 205998#L3077-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 206000#L3087-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 205990#L1849-23 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 205971#L1870-23 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 205962#L3092-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 205953#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 205949#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 205950#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 212930#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 212931#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 212932#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 212925#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 212887#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 212883#L2596-4 assume !(0 != timeShift_~tmp___9~2); 212879#L2687-6 assume !(1 == ~doorState~0); 212871#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 212864#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 212847#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 212842#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 212840#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 212834#L2412-6 assume !(1 == ~currentHeading~0); 211141#L2422-18 assume !(0 == ~currentFloorID~0); 210821#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210805#L2428-13 assume { :end_inline_continueInDirection } true; 210802#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 210800#L3207-2 assume !(-1 == ~expectedDirection~0); 210797#L3219-2 assume !(1 == ~expectedDirection~0); 210795#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 210794#L2719-2 assume { :end_inline_timeShift } true; 210793#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 210790#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 210786#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 210785#L765-1 assume 0 == initPersonOnFloor_~floor; 210779#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 210750#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 210748#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 210749#L569-5 assume { :end_inline_callOnFloor } true; 213120#L909-1 assume { :end_inline_initPersonOnFloor } true; 213116#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 213115#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 213114#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 213112#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 213036#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 201527#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 200364#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 200365#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 211051#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 210692#L494-63 assume !(0 == isFloorCalling_~floorID); 210693#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 221151#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 221147#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 221148#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 221150#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 221149#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 216042#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 216043#L2596-6 assume !(0 != timeShift_~tmp___9~2); 199750#L2687-9 assume !(1 == ~doorState~0); 199744#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 199745#L2036-6 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 228198#L1068-15 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 201787#L2040-6 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 198847#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 198848#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 200086#L2412-9 assume !(1 == ~currentHeading~0); 200769#L2422-27 assume !(0 == ~currentFloorID~0); 200647#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 203973#L2428-19 assume { :end_inline_continueInDirection } true; 204771#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 220027#L3207-3 assume !(-1 == ~expectedDirection~0); 220021#L3219-3 assume !(1 == ~expectedDirection~0); 220018#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 220016#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 220015#L1268-3 [2018-11-18 12:53:20,501 INFO L796 eck$LassoCheckResult]: Loop: 220015#L1268-3 assume true; 220014#L1268-1 assume !false; 220013#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 220012#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 220011#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 220006#L1276 assume 1 != cleanup_~tmp___0~0; 220002#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 219990#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 219983#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 219971#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 216201#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 219966#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 219965#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 219964#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 219962#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 219960#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 216134#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 216135#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 227279#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 227278#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 216145#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 216053#L494-89 assume !(0 == isFloorCalling_~floorID); 216054#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 216046#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 216047#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 227404#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 200335#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 200336#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 227405#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 228090#L2596-8 assume !(0 != timeShift_~tmp___9~2); 228091#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 228137#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 228127#L2036-8 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 228123#L1068-20 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 228098#L2040-8 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 227999#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 228093#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 228092#L2412-12 assume !(1 == ~currentHeading~0); 203966#L2422-36 assume !(0 == ~currentFloorID~0); 200602#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 204768#L2428-25 assume { :end_inline_continueInDirection } true; 204769#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 220030#L3207-4 assume !(-1 == ~expectedDirection~0); 220024#L3219-4 assume !(1 == ~expectedDirection~0); 220019#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 220017#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 220015#L1268-3 [2018-11-18 12:53:20,509 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:20,509 INFO L82 PathProgramCache]: Analyzing trace with hash 395898399, now seen corresponding path program 1 times [2018-11-18 12:53:20,509 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:20,509 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:20,510 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:20,510 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:20,510 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:20,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:21,263 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:21,264 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:21,264 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:21,264 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:21,264 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:21,264 INFO L82 PathProgramCache]: Analyzing trace with hash 1942067851, now seen corresponding path program 1 times [2018-11-18 12:53:21,264 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:21,264 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:21,265 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:21,265 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:21,265 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:21,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:21,288 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:21,288 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:21,288 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:53:21,288 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:21,289 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:53:21,289 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:53:21,289 INFO L87 Difference]: Start difference. First operand 29655 states and 54685 transitions. cyclomatic complexity: 25031 Second operand 5 states. [2018-11-18 12:53:29,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:29,543 INFO L93 Difference]: Finished difference Result 70636 states and 130350 transitions. [2018-11-18 12:53:29,544 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 12:53:29,544 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 70636 states and 130350 transitions. [2018-11-18 12:53:29,715 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18095 [2018-11-18 12:53:29,841 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 70636 states to 70636 states and 130350 transitions. [2018-11-18 12:53:29,841 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 70636 [2018-11-18 12:53:29,878 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 70636 [2018-11-18 12:53:29,878 INFO L73 IsDeterministic]: Start isDeterministic. Operand 70636 states and 130350 transitions. [2018-11-18 12:53:29,909 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:29,909 INFO L705 BuchiCegarLoop]: Abstraction has 70636 states and 130350 transitions. [2018-11-18 12:53:29,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70636 states and 130350 transitions. [2018-11-18 12:53:30,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70636 to 29083. [2018-11-18 12:53:30,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 29083 states. [2018-11-18 12:53:30,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29083 states to 29083 states and 53523 transitions. [2018-11-18 12:53:30,225 INFO L728 BuchiCegarLoop]: Abstraction has 29083 states and 53523 transitions. [2018-11-18 12:53:30,225 INFO L608 BuchiCegarLoop]: Abstraction has 29083 states and 53523 transitions. [2018-11-18 12:53:30,225 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 12:53:30,225 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29083 states and 53523 transitions. [2018-11-18 12:53:30,277 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6835 [2018-11-18 12:53:30,278 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:30,278 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:30,280 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:30,280 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:30,281 INFO L794 eck$LassoCheckResult]: Stem: 300609#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 300610#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 300213#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 300214#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 300015#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 300016#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 300383#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 304192#L487 assume { :end_inline_initFloors } true; 300110#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 300111#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 300464#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 300242#L765 assume 0 == initPersonOnFloor_~floor; 299306#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 298924#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 303645#L557 assume !(0 == callOnFloor_~floorID); 305281#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 300220#L569-2 assume { :end_inline_callOnFloor } true; 305288#L909 assume { :end_inline_initPersonOnFloor } true; 305289#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 298921#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 298922#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 299429#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 299430#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 301953#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 300552#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 300553#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 300599#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 304669#L494 assume !(0 == isFloorCalling_~floorID); 304636#L498 assume !(1 == isFloorCalling_~floorID); 303367#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 302514#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 302884#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 302886#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 301471#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 301472#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 303957#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 303958#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 305844#L2596 assume !(0 != timeShift_~tmp___9~2); 305845#L2687 assume !(1 == ~doorState~0); 300061#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 300062#L2036 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 305808#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 305809#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 299098#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 299099#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 305922#L2412 assume !(1 == ~currentHeading~0); 305921#L2422 assume !(0 == ~currentFloorID~0); 304296#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 304297#L2428-1 assume { :end_inline_continueInDirection } true; 305920#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 305918#L3207 assume !(-1 == ~expectedDirection~0); 305915#L3219 assume !(1 == ~expectedDirection~0); 305913#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 305912#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 305911#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 305910#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 305908#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 305904#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 305901#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 305893#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 305878#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 305872#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 305866#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 305865#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 305864#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 305862#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 305859#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 305861#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 314135#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 314134#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 314131#L2596-2 assume !(0 != timeShift_~tmp___9~2); 314132#L2687-3 assume !(1 == ~doorState~0); 327943#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 302349#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 302350#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 327916#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 327913#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 327914#L2412-3 assume !(1 == ~currentHeading~0); 327972#L2422-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 300944#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 304287#L2428-7 assume { :end_inline_continueInDirection } true; 312596#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 312597#L3207-1 assume !(-1 == ~expectedDirection~0); 312450#L3219-1 assume !(1 == ~expectedDirection~0); 312449#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 312437#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 312438#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 312431#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 312432#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 316671#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 312426#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 312425#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 312304#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 312276#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 312226#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 312002#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 311997#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 311992#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 311993#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 311996#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 311994#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 311995#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 311983#L2596-4 assume !(0 != timeShift_~tmp___9~2); 300055#L2687-6 assume !(1 == ~doorState~0); 300056#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 300057#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 302362#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 326572#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 326569#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 326570#L2412-6 assume !(1 == ~currentHeading~0); 326747#L2422-18 assume !(0 == ~currentFloorID~0); 300904#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 304265#L2428-13 assume { :end_inline_continueInDirection } true; 310496#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 310497#L3207-2 assume !(-1 == ~expectedDirection~0); 310488#L3219-2 assume !(1 == ~expectedDirection~0); 310487#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 310482#L2719-2 assume { :end_inline_timeShift } true; 310483#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 310477#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 310473#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 310471#L765-1 assume 0 == initPersonOnFloor_~floor; 310472#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 310432#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 310433#L557-2 assume !(0 == callOnFloor_~floorID); 310421#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 310422#L569-5 assume { :end_inline_callOnFloor } true; 310416#L909-1 assume { :end_inline_initPersonOnFloor } true; 310417#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 310158#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 310159#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 310013#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 310014#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 310155#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 310148#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 309872#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 309840#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 307315#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 307314#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 307313#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 307312#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 307311#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 307306#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 307304#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 307298#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 307296#L2596-6 assume !(0 != timeShift_~tmp___9~2); 300058#L2687-9 assume !(1 == ~doorState~0); 300059#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 302330#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 302331#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 326690#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 326688#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 326689#L2412-9 assume !(1 == ~currentHeading~0); 327970#L2422-27 assume !(0 == ~currentFloorID~0); 300900#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 304130#L2428-19 assume { :end_inline_continueInDirection } true; 306311#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 306295#L3207-3 assume !(-1 == ~expectedDirection~0); 306294#L3219-3 assume !(1 == ~expectedDirection~0); 317703#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 317702#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 317701#L1268-3 [2018-11-18 12:53:30,281 INFO L796 eck$LassoCheckResult]: Loop: 317701#L1268-3 assume true; 317700#L1268-1 assume !false; 317699#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 317698#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 306275#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 306273#L1276 assume 1 != cleanup_~tmp___0~0; 306269#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 306270#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 306247#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 306248#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 317649#L1944 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 306208#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 306209#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 306204#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 306205#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 306200#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 306201#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 323268#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 306194#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 306192#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 306191#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 306156#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 306153#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 306152#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 306151#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 306149#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 306146#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 306147#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 309632#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 309633#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 309624#L2596-8 assume !(0 != timeShift_~tmp___9~2); 300049#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 300050#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 302338#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 302339#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 327739#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 327737#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 327736#L2412-12 assume !(1 == ~currentHeading~0); 327735#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 300859#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 304128#L2428-25 assume { :end_inline_continueInDirection } true; 308078#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 306301#L3207-4 assume !(-1 == ~expectedDirection~0); 306300#L3219-4 assume !(1 == ~expectedDirection~0); 306284#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 306285#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 317701#L1268-3 [2018-11-18 12:53:30,288 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:30,288 INFO L82 PathProgramCache]: Analyzing trace with hash 956776015, now seen corresponding path program 1 times [2018-11-18 12:53:30,288 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:30,288 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:30,289 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:30,289 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:30,289 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:30,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:31,038 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:31,038 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:31,038 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:31,039 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:31,039 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:31,039 INFO L82 PathProgramCache]: Analyzing trace with hash -1515949540, now seen corresponding path program 1 times [2018-11-18 12:53:31,039 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:31,039 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:31,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:31,040 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:31,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:31,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:31,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:31,078 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:31,078 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:53:31,078 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:31,078 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:53:31,078 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:53:31,079 INFO L87 Difference]: Start difference. First operand 29083 states and 53523 transitions. cyclomatic complexity: 24441 Second operand 5 states. [2018-11-18 12:53:34,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:34,606 INFO L93 Difference]: Finished difference Result 143965 states and 266822 transitions. [2018-11-18 12:53:34,607 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 12:53:34,607 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 143965 states and 266822 transitions. [2018-11-18 12:53:34,974 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36350 [2018-11-18 12:53:35,267 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 143965 states to 143965 states and 266822 transitions. [2018-11-18 12:53:35,267 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 143965 [2018-11-18 12:53:35,353 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 143965 [2018-11-18 12:53:35,353 INFO L73 IsDeterministic]: Start isDeterministic. Operand 143965 states and 266822 transitions. [2018-11-18 12:53:35,421 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:35,421 INFO L705 BuchiCegarLoop]: Abstraction has 143965 states and 266822 transitions. [2018-11-18 12:53:35,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143965 states and 266822 transitions. [2018-11-18 12:53:36,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143965 to 56815. [2018-11-18 12:53:36,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 56815 states. [2018-11-18 12:53:36,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56815 states to 56815 states and 104599 transitions. [2018-11-18 12:53:36,410 INFO L728 BuchiCegarLoop]: Abstraction has 56815 states and 104599 transitions. [2018-11-18 12:53:36,410 INFO L608 BuchiCegarLoop]: Abstraction has 56815 states and 104599 transitions. [2018-11-18 12:53:36,410 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-18 12:53:36,410 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56815 states and 104599 transitions. [2018-11-18 12:53:36,515 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13416 [2018-11-18 12:53:36,515 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:36,515 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:36,517 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:36,517 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:36,518 INFO L794 eck$LassoCheckResult]: Stem: 473720#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 473721#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 473288#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 473289#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 473085#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 473086#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 473462#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 477370#L487 assume { :end_inline_initFloors } true; 473181#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 473182#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 473557#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 473318#L765 assume 0 == initPersonOnFloor_~floor; 472376#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 471994#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 476760#L557 assume !(0 == callOnFloor_~floorID); 478599#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 473295#L569-2 assume { :end_inline_callOnFloor } true; 480339#L909 assume { :end_inline_initPersonOnFloor } true; 480338#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 480337#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 480336#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 480335#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 477969#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 475065#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 473657#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 473658#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 473710#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 477909#L494 assume !(0 == isFloorCalling_~floorID); 477873#L498 assume !(1 == isFloorCalling_~floorID); 476490#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 475628#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 475997#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 475070#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 474594#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 473647#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 473648#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 477124#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 479211#L2596 assume !(0 != timeShift_~tmp___9~2); 473227#L2687 assume !(1 == ~doorState~0); 473131#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 473132#L2036 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 475467#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 475289#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 473593#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 480440#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 480441#L2412 assume !(1 == ~currentHeading~0); 480732#L2422 assume !(0 == ~currentFloorID~0); 480726#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 480723#L2428-1 assume { :end_inline_continueInDirection } true; 480720#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 480718#L3207 assume !(-1 == ~expectedDirection~0); 480715#L3219 assume !(1 == ~expectedDirection~0); 480713#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 480712#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 480711#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 480710#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 480707#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 480708#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 480694#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 480688#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 480673#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 480666#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 480660#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 480658#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 480657#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 480656#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 480655#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 480650#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 480648#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 480647#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 480645#L2596-2 assume !(0 != timeShift_~tmp___9~2); 480561#L2687-3 assume !(1 == ~doorState~0); 480562#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 480239#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 480240#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 480610#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 480917#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 480918#L2412-3 assume !(1 == ~currentHeading~0); 481005#L2422-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 481006#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 488077#L2428-7 assume { :end_inline_continueInDirection } true; 488075#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 499099#L3207-1 assume !(-1 == ~expectedDirection~0); 499096#L3219-1 assume !(1 == ~expectedDirection~0); 499094#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 499093#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 499092#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 499091#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 499089#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 499088#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 479635#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 479632#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 479629#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 479561#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 479554#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 479551#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 479549#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 479545#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 479541#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 479536#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 479537#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 479529#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 479530#L2596-4 assume !(0 != timeShift_~tmp___9~2); 479518#L2687-6 assume !(1 == ~doorState~0); 479519#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 479463#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 479464#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 479436#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 479437#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 486981#L2412-6 assume !(1 == ~currentHeading~0); 479429#L2422-18 assume !(0 == ~currentFloorID~0); 479430#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 500723#L2428-13 assume { :end_inline_continueInDirection } true; 500720#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 500718#L3207-2 assume !(-1 == ~expectedDirection~0); 500715#L3219-2 assume !(1 == ~expectedDirection~0); 500713#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 500712#L2719-2 assume { :end_inline_timeShift } true; 500711#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 500708#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 500704#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 500703#L765-1 assume 0 == initPersonOnFloor_~floor; 500697#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 500668#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 500666#L557-2 assume !(0 == callOnFloor_~floorID); 500662#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 500661#L569-5 assume { :end_inline_callOnFloor } true; 500660#L909-1 assume { :end_inline_initPersonOnFloor } true; 500659#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 500658#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 500657#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 500655#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 500654#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 488338#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 488333#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 488068#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 488023#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 487966#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 487964#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 487963#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 487962#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 487961#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 487956#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 487953#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 487946#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 487942#L2596-6 assume !(0 != timeShift_~tmp___9~2); 487941#L2687-9 assume !(1 == ~doorState~0); 487929#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 487907#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 487855#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 487836#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 487832#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 487833#L2412-9 assume !(1 == ~currentHeading~0); 488446#L2422-27 assume !(0 == ~currentFloorID~0); 498460#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 498454#L2428-19 assume { :end_inline_continueInDirection } true; 498450#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 498445#L3207-3 assume !(-1 == ~expectedDirection~0); 498439#L3219-3 assume !(1 == ~expectedDirection~0); 498436#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 498434#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 498433#L1268-3 [2018-11-18 12:53:36,518 INFO L796 eck$LassoCheckResult]: Loop: 498433#L1268-3 assume true; 498432#L1268-1 assume !false; 498431#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 498430#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 498427#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 498425#L1276 assume 1 != cleanup_~tmp___0~0; 498421#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 498419#L494-84 assume !(0 == isFloorCalling_~floorID); 498418#L498-84 assume !(1 == isFloorCalling_~floorID); 498404#L502-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 498397#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 498387#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 498382#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 498381#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 498380#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 498379#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 498378#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 498376#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 498375#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 488576#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 488525#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 488356#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 488349#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 479427#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 479424#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 479422#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 479418#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 479416#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 479409#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 479410#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 479405#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 479406#L2596-8 assume !(0 != timeShift_~tmp___9~2); 479396#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 479397#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 479353#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 479354#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 479311#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 479312#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 486462#L2412-12 assume !(1 == ~currentHeading~0); 488327#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 488328#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 498457#L2428-25 assume { :end_inline_continueInDirection } true; 498451#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 498448#L3207-4 assume !(-1 == ~expectedDirection~0); 498442#L3219-4 assume !(1 == ~expectedDirection~0); 498437#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 498435#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 498433#L1268-3 [2018-11-18 12:53:36,527 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:36,527 INFO L82 PathProgramCache]: Analyzing trace with hash 956776015, now seen corresponding path program 2 times [2018-11-18 12:53:36,527 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:36,527 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:36,528 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:36,528 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:36,528 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:36,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:37,277 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:37,277 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:37,277 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:37,278 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:37,278 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:37,278 INFO L82 PathProgramCache]: Analyzing trace with hash 1758179928, now seen corresponding path program 1 times [2018-11-18 12:53:37,278 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:37,278 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:37,279 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:37,279 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:53:37,279 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:37,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:37,295 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:37,295 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:37,295 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:53:37,295 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:37,295 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:53:37,295 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:53:37,295 INFO L87 Difference]: Start difference. First operand 56815 states and 104599 transitions. cyclomatic complexity: 47785 Second operand 3 states. [2018-11-18 12:53:38,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:38,043 INFO L93 Difference]: Finished difference Result 61463 states and 112939 transitions. [2018-11-18 12:53:38,044 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:53:38,044 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 61463 states and 112939 transitions. [2018-11-18 12:53:38,181 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13810 [2018-11-18 12:53:38,285 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 61463 states to 61463 states and 112939 transitions. [2018-11-18 12:53:38,285 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61463 [2018-11-18 12:53:38,317 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61463 [2018-11-18 12:53:38,317 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61463 states and 112939 transitions. [2018-11-18 12:53:38,346 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:38,346 INFO L705 BuchiCegarLoop]: Abstraction has 61463 states and 112939 transitions. [2018-11-18 12:53:38,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61463 states and 112939 transitions. [2018-11-18 12:53:38,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61463 to 56279. [2018-11-18 12:53:38,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 56279 states. [2018-11-18 12:53:38,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56279 states to 56279 states and 103591 transitions. [2018-11-18 12:53:38,721 INFO L728 BuchiCegarLoop]: Abstraction has 56279 states and 103591 transitions. [2018-11-18 12:53:38,721 INFO L608 BuchiCegarLoop]: Abstraction has 56279 states and 103591 transitions. [2018-11-18 12:53:38,721 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-18 12:53:38,721 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56279 states and 103591 transitions. [2018-11-18 12:53:38,823 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13120 [2018-11-18 12:53:38,823 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:38,823 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:38,825 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:38,825 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:38,826 INFO L794 eck$LassoCheckResult]: Stem: 591978#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 591979#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 591566#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 591567#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 591366#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 591367#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 591738#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 595379#L487 assume { :end_inline_initFloors } true; 591462#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 591463#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 591832#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 591594#L765 assume 0 == initPersonOnFloor_~floor; 590660#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 590280#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 594826#L557 assume !(0 == callOnFloor_~floorID); 596416#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 591573#L569-2 assume { :end_inline_callOnFloor } true; 591575#L909 assume { :end_inline_initPersonOnFloor } true; 592336#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 590274#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 590275#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 590779#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 590780#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 593262#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 591919#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 591920#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 591968#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 595824#L494 assume !(0 == isFloorCalling_~floorID); 595795#L498 assume !(1 == isFloorCalling_~floorID); 594570#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 593790#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 594135#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 593267#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 592818#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 591909#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 591910#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 595143#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 596995#L2596 assume !(0 != timeShift_~tmp___9~2); 591508#L2687 assume !(1 == ~doorState~0); 591410#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 591411#L2036 assume 1 == stopRequestedInDirection_~dir;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 593637#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 593468#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 590454#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 590455#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 591744#L2412 assume !(1 == ~currentHeading~0); 592417#L2422 assume !(0 == ~currentFloorID~0); 592350#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 595278#L2428-1 assume { :end_inline_continueInDirection } true; 595268#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 618326#L3207 assume !(-1 == ~expectedDirection~0); 618323#L3219 assume !(1 == ~expectedDirection~0); 618321#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 618320#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 618319#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 618317#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 618315#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 618309#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 618310#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 620872#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 620849#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 620824#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 619126#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 619123#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 619119#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 618136#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 618137#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 618140#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 618138#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 618139#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 639885#L2596-2 assume !(0 != timeShift_~tmp___9~2); 639884#L2687-3 assume !(1 == ~doorState~0); 639883#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 639882#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 639839#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 639831#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 639828#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 639829#L2412-3 assume !(1 == ~currentHeading~0); 644337#L2422-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 592319#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 595274#L2428-7 assume { :end_inline_continueInDirection } true; 595275#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 622461#L3207-1 assume !(-1 == ~expectedDirection~0); 622458#L3219-1 assume !(1 == ~expectedDirection~0); 622456#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 622445#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 622441#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 622434#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 622367#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 607338#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 607336#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 607335#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 607330#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 607326#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 607278#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 607272#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 607270#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 607230#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 607232#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 607271#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 607233#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 604803#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 604804#L2596-4 assume !(0 != timeShift_~tmp___9~2); 607757#L2687-6 assume !(1 == ~doorState~0); 607741#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 607733#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 607716#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 607708#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 607705#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 607413#L2412-6 assume !(1 == ~currentHeading~0); 607405#L2422-18 assume !(0 == ~currentFloorID~0); 607404#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 607403#L2428-13 assume { :end_inline_continueInDirection } true; 607400#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 607398#L3207-2 assume !(-1 == ~expectedDirection~0); 607395#L3219-2 assume !(1 == ~expectedDirection~0); 607393#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 607392#L2719-2 assume { :end_inline_timeShift } true; 607391#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 607382#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 607377#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 607375#L765-1 assume 0 == initPersonOnFloor_~floor; 607226#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 607100#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 604801#L557-2 assume !(0 == callOnFloor_~floorID); 597539#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 597536#L569-5 assume { :end_inline_callOnFloor } true; 597535#L909-1 assume { :end_inline_initPersonOnFloor } true; 597534#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 597533#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 597532#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 597529#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 597530#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 597437#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 597435#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 597429#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 597403#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 597400#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 597398#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 597397#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 597396#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 597395#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 597390#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 597388#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 597387#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 597385#L2596-6 assume !(0 != timeShift_~tmp___9~2); 597384#L2687-9 assume !(1 == ~doorState~0); 597383#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 597381#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 597382#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 597103#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 597097#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 597089#L2412-9 assume !(1 == ~currentHeading~0); 597080#L2422-27 assume !(0 == ~currentFloorID~0); 597072#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 597069#L2428-19 assume { :end_inline_continueInDirection } true; 597059#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 597060#L3207-3 assume !(-1 == ~expectedDirection~0); 624923#L3219-3 assume !(1 == ~expectedDirection~0); 624918#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 624915#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 624914#L1268-3 [2018-11-18 12:53:38,826 INFO L796 eck$LassoCheckResult]: Loop: 624914#L1268-3 assume true; 624910#L1268-1 assume !false; 624906#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 624904#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 624901#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 624899#L1276 assume 1 != cleanup_~tmp___0~0; 624739#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 624738#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 624736#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 624731#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 623453#L1944 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 623454#L494-85 assume !(0 == isFloorCalling_~floorID); 639299#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 639297#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 596932#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 591445#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 591127#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 591128#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 639135#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 639133#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 639130#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 639131#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 623242#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 623240#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 623234#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 623212#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 623209#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 623207#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 623206#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 623205#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 623204#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 623198#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 623195#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 623071#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 623070#L2596-8 assume !(0 != timeShift_~tmp___9~2); 623066#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 622990#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 622984#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 622981#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 622960#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 622958#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 622959#L2412-12 assume !(1 == ~currentHeading~0); 622531#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 622528#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 622527#L2428-25 assume { :end_inline_continueInDirection } true; 597061#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 597062#L3207-4 assume !(-1 == ~expectedDirection~0); 624920#L3219-4 assume !(1 == ~expectedDirection~0); 624917#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 624916#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 624914#L1268-3 [2018-11-18 12:53:38,833 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:38,833 INFO L82 PathProgramCache]: Analyzing trace with hash 956776015, now seen corresponding path program 3 times [2018-11-18 12:53:38,833 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:38,833 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:38,834 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:38,834 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:38,834 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:38,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:39,593 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:39,593 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:39,593 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:39,596 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:39,596 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:39,596 INFO L82 PathProgramCache]: Analyzing trace with hash 383163924, now seen corresponding path program 1 times [2018-11-18 12:53:39,597 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:39,597 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:39,597 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:39,597 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:53:39,597 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:39,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:39,629 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:39,630 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:39,630 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:39,630 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:39,630 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 12:53:39,630 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 12:53:39,630 INFO L87 Difference]: Start difference. First operand 56279 states and 103591 transitions. cyclomatic complexity: 47313 Second operand 4 states. [2018-11-18 12:53:40,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:40,455 INFO L93 Difference]: Finished difference Result 104353 states and 192331 transitions. [2018-11-18 12:53:40,455 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:53:40,455 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104353 states and 192331 transitions. [2018-11-18 12:53:40,738 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25190 [2018-11-18 12:53:40,953 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104353 states to 104353 states and 192331 transitions. [2018-11-18 12:53:40,953 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104353 [2018-11-18 12:53:41,010 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104353 [2018-11-18 12:53:41,010 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104353 states and 192331 transitions. [2018-11-18 12:53:41,056 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:41,056 INFO L705 BuchiCegarLoop]: Abstraction has 104353 states and 192331 transitions. [2018-11-18 12:53:41,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104353 states and 192331 transitions. [2018-11-18 12:53:41,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104353 to 56331. [2018-11-18 12:53:41,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 56331 states. [2018-11-18 12:53:41,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56331 states to 56331 states and 103643 transitions. [2018-11-18 12:53:41,597 INFO L728 BuchiCegarLoop]: Abstraction has 56331 states and 103643 transitions. [2018-11-18 12:53:41,597 INFO L608 BuchiCegarLoop]: Abstraction has 56331 states and 103643 transitions. [2018-11-18 12:53:41,597 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-18 12:53:41,598 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56331 states and 103643 transitions. [2018-11-18 12:53:41,709 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13132 [2018-11-18 12:53:41,709 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:41,710 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:41,712 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:41,712 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:41,713 INFO L794 eck$LassoCheckResult]: Stem: 752687#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 752688#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 752234#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 752235#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 752029#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 752030#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 752412#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 756291#L487 assume { :end_inline_initFloors } true; 752127#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 752128#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 752515#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 752263#L765 assume 0 == initPersonOnFloor_~floor; 751315#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 750924#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 755686#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 757541#L569-2 assume { :end_inline_callOnFloor } true; 758779#L909 assume { :end_inline_initPersonOnFloor } true; 758778#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 758777#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 758776#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 758775#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 756897#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 754026#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 753603#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 756503#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 752676#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 756831#L494 assume !(0 == isFloorCalling_~floorID); 756832#L498 assume !(1 == isFloorCalling_~floorID); 755409#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 754615#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 754961#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 754963#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 753567#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 753568#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 756043#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 756044#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 758228#L2596 assume !(0 != timeShift_~tmp___9~2); 758229#L2687 assume !(1 == ~doorState~0); 752075#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 752076#L2036 assume !(1 == stopRequestedInDirection_~dir); 753906#L2205 assume !(0 == ~currentFloorID~0); 753907#L2211 assume !(~currentFloorID~0 > 0); 752580#L2226 assume ~currentFloorID~0 > 0; 752581#L2228 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 752517#L2229 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 752518#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 758649#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 758651#L2412 assume !(1 == ~currentHeading~0); 756427#L2422 assume !(0 == ~currentFloorID~0); 753075#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 756185#L2428-1 assume { :end_inline_continueInDirection } true; 756175#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 763819#L3207 assume !(-1 == ~expectedDirection~0); 763815#L3219 assume !(1 == ~expectedDirection~0); 763674#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 761179#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 761178#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 761177#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 761173#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 761170#L3138-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 761171#L1849-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 770981#L1870-16 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 770968#L3142-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 770964#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 770963#L494-21 assume !(0 == isFloorCalling_~floorID); 770960#L498-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 770954#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 770951#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 770952#L1849-21 assume !(0 == buttonForFloorIsPressed_~floorID); 770956#L1853-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 770953#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 770950#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 770948#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 770946#L2596-2 assume !(0 != timeShift_~tmp___9~2); 770947#L2687-3 assume !(1 == ~doorState~0); 774878#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 774877#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 774876#L2205-2 assume !(0 == ~currentFloorID~0); 758659#L2211-2 assume !(~currentFloorID~0 > 0); 752588#L2226-2 assume ~currentFloorID~0 > 0; 752589#L2228-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 758655#L2229-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 758654#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 759734#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 774824#L2412-3 assume !(1 == ~currentHeading~0); 756398#L2422-9 assume !(0 == ~currentFloorID~0); 753042#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 774074#L2428-7 assume { :end_inline_continueInDirection } true; 774059#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 774057#L3207-1 assume !(-1 == ~expectedDirection~0); 771546#L3219-1 assume !(1 == ~expectedDirection~0); 770332#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 770330#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 770261#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 770262#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 770234#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 770236#L3138-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 770311#L1849-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 770296#L1870-27 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 770289#L3142-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 770285#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 770284#L494-42 assume !(0 == isFloorCalling_~floorID); 770280#L498-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 770281#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 789230#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 789231#L1849-32 assume !(0 == buttonForFloorIsPressed_~floorID); 789236#L1853-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 789233#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 789232#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 789229#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 789226#L2596-4 assume !(0 != timeShift_~tmp___9~2); 766353#L2687-6 assume !(1 == ~doorState~0); 766285#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 766283#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 753876#L2205-4 assume !(0 == ~currentFloorID~0); 753877#L2211-4 assume !(~currentFloorID~0 > 0); 752565#L2226-4 assume ~currentFloorID~0 > 0; 752567#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 752506#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 752507#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 766563#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 753134#L2412-6 assume !(1 == ~currentHeading~0); 753136#L2422-18 assume !(0 == ~currentFloorID~0); 756376#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 756377#L2428-13 assume { :end_inline_continueInDirection } true; 804748#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 804746#L3207-2 assume !(-1 == ~expectedDirection~0); 804743#L3219-2 assume !(1 == ~expectedDirection~0); 804741#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 804740#L2719-2 assume { :end_inline_timeShift } true; 804739#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 804734#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 804730#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 804728#L765-1 assume 0 == initPersonOnFloor_~floor; 804725#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 804696#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 804695#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 763890#L569-5 assume { :end_inline_callOnFloor } true; 804664#L909-1 assume { :end_inline_initPersonOnFloor } true; 794800#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 794798#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 794795#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 794790#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 794788#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 786961#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 786957#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 786919#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 786918#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 786917#L494-63 assume !(0 == isFloorCalling_~floorID); 786914#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 786908#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 786903#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 786904#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 786910#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 786907#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 786905#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 786906#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 786894#L2596-6 assume !(0 != timeShift_~tmp___9~2); 759693#L2687-9 assume !(1 == ~doorState~0); 752067#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 752068#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 806154#L2205-6 assume !(0 == ~currentFloorID~0); 806153#L2211-6 assume !(~currentFloorID~0 > 0); 758533#L2226-6 assume ~currentFloorID~0 > 0; 806150#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 752508#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 751205#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 759685#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 759686#L2412-9 assume !(1 == ~currentHeading~0); 756236#L2422-27 assume !(0 == ~currentFloorID~0); 752993#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 756991#L2428-19 assume { :end_inline_continueInDirection } true; 756992#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 807069#L3207-3 assume !(-1 == ~expectedDirection~0); 807068#L3219-3 assume !(1 == ~expectedDirection~0); 752041#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 751851#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 751849#L1268-3 [2018-11-18 12:53:41,713 INFO L796 eck$LassoCheckResult]: Loop: 751849#L1268-3 assume true; 805429#L1268-1 assume !false; 805427#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 805424#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 805419#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 805417#L1276 assume 1 != cleanup_~tmp___0~0; 805416#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 805415#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 805414#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 805413#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 777893#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 804657#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 792961#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 792959#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 792957#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 792953#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 792954#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 793060#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 793056#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 792925#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 792924#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 792923#L494-89 assume !(0 == isFloorCalling_~floorID); 792920#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 792918#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 792911#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 792909#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 792904#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 792900#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 792899#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 792898#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 759111#L2596-8 assume !(0 != timeShift_~tmp___9~2); 759112#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 758567#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 754444#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 754445#L2205-8 assume !(0 == ~currentFloorID~0); 805505#L2211-8 assume !(~currentFloorID~0 > 0); 758547#L2226-8 assume ~currentFloorID~0 > 0; 805481#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 752498#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 752499#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 777438#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 777440#L2412-12 assume !(1 == ~currentHeading~0); 756220#L2422-36 assume !(0 == ~currentFloorID~0); 752950#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 756990#L2428-25 assume { :end_inline_continueInDirection } true; 751285#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 751286#L3207-4 assume !(-1 == ~expectedDirection~0); 751957#L3219-4 assume !(1 == ~expectedDirection~0); 751958#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 751848#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 751849#L1268-3 [2018-11-18 12:53:41,725 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:41,725 INFO L82 PathProgramCache]: Analyzing trace with hash 1127573677, now seen corresponding path program 1 times [2018-11-18 12:53:41,725 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:41,725 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:41,726 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:41,726 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:41,726 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:41,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:42,498 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:42,498 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:42,498 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:42,499 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:42,499 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:42,499 INFO L82 PathProgramCache]: Analyzing trace with hash -1682508162, now seen corresponding path program 1 times [2018-11-18 12:53:42,499 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:42,499 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:42,499 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:42,500 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:42,500 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:42,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:42,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:42,523 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:42,523 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:53:42,524 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:42,524 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:53:42,524 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:53:42,524 INFO L87 Difference]: Start difference. First operand 56331 states and 103643 transitions. cyclomatic complexity: 47313 Second operand 5 states. [2018-11-18 12:53:47,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:47,623 INFO L93 Difference]: Finished difference Result 74199 states and 136009 transitions. [2018-11-18 12:53:47,623 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 12:53:47,623 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 74199 states and 136009 transitions. [2018-11-18 12:53:48,070 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17652 [2018-11-18 12:53:48,187 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 74199 states to 74199 states and 136009 transitions. [2018-11-18 12:53:48,187 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 74199 [2018-11-18 12:53:48,221 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 74199 [2018-11-18 12:53:48,221 INFO L73 IsDeterministic]: Start isDeterministic. Operand 74199 states and 136009 transitions. [2018-11-18 12:53:48,250 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:48,250 INFO L705 BuchiCegarLoop]: Abstraction has 74199 states and 136009 transitions. [2018-11-18 12:53:48,279 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74199 states and 136009 transitions. [2018-11-18 12:53:48,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74199 to 73689. [2018-11-18 12:53:48,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73689 states. [2018-11-18 12:53:48,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73689 states to 73689 states and 135247 transitions. [2018-11-18 12:53:48,708 INFO L728 BuchiCegarLoop]: Abstraction has 73689 states and 135247 transitions. [2018-11-18 12:53:48,708 INFO L608 BuchiCegarLoop]: Abstraction has 73689 states and 135247 transitions. [2018-11-18 12:53:48,708 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-18 12:53:48,708 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 73689 states and 135247 transitions. [2018-11-18 12:53:48,843 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17506 [2018-11-18 12:53:48,844 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:48,844 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:48,847 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:48,847 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:48,848 INFO L794 eck$LassoCheckResult]: Stem: 883163#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 883164#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 882772#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 882773#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 882564#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 882565#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 882939#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 886590#L487 assume { :end_inline_initFloors } true; 882661#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 882662#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 883026#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 882800#L765 assume 0 == initPersonOnFloor_~floor; 881860#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 881472#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 886030#L557 assume !(0 == callOnFloor_~floorID); 887627#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 882779#L569-2 assume { :end_inline_callOnFloor } true; 882781#L909 assume { :end_inline_initPersonOnFloor } true; 883527#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 881466#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 881467#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 881983#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 881984#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 884472#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 883109#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 883110#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 883153#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 887031#L494 assume !(0 == isFloorCalling_~floorID); 887012#L498 assume !(1 == isFloorCalling_~floorID); 885785#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 884998#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 885337#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 884477#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 884018#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 883099#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 883100#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 886357#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 888177#L2596 assume !(0 != timeShift_~tmp___9~2); 882711#L2687 assume !(1 == ~doorState~0); 882607#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 882608#L2036 assume !(1 == stopRequestedInDirection_~dir); 884346#L2205 assume !(0 == ~currentFloorID~0); 884347#L2211 assume ~currentFloorID~0 > 0; 884708#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 884709#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 885994#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 884692#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 881771#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 888202#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 888205#L2412 assume !(1 == ~currentHeading~0); 928859#L2422 assume !(0 == ~currentFloorID~0); 928854#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 928853#L2428-1 assume { :end_inline_continueInDirection } true; 928850#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 928848#L3207 assume !(-1 == ~expectedDirection~0); 928841#L3219 assume !(1 == ~expectedDirection~0); 928838#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 928837#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 928836#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 928834#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 928830#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 928827#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 928825#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 928823#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 928817#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 928812#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 928802#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 928799#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 928796#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 928794#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 928792#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 928786#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 928783#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 928780#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 928778#L2596-2 assume !(0 != timeShift_~tmp___9~2); 928776#L2687-3 assume !(1 == ~doorState~0); 928775#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 928771#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 928772#L2205-2 assume !(0 == ~currentFloorID~0); 929168#L2211-2 assume ~currentFloorID~0 > 0; 930970#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 930968#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 930967#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 927962#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 927938#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 927935#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 927933#L2412-3 assume !(1 == ~currentHeading~0); 927926#L2422-9 assume !(0 == ~currentFloorID~0); 927921#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 927919#L2428-7 assume { :end_inline_continueInDirection } true; 927916#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 927914#L3207-1 assume !(-1 == ~expectedDirection~0); 927907#L3219-1 assume !(1 == ~expectedDirection~0); 927904#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 927894#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 927892#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 927889#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 926431#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 908200#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 908195#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 908192#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 908186#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 908181#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 908175#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 908173#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 908171#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 908170#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 908161#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 908158#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 908155#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 908154#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 908150#L2596-4 assume !(0 != timeShift_~tmp___9~2); 908149#L2687-6 assume !(1 == ~doorState~0); 908146#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 908144#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 908145#L2205-4 assume !(0 == ~currentFloorID~0); 908147#L2211-4 assume !(~currentFloorID~0 > 0); 908264#L2226-4 assume ~currentFloorID~0 > 0; 908265#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 908297#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 883020#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 937398#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 937396#L2412-6 assume !(1 == ~currentHeading~0); 937390#L2422-18 assume !(0 == ~currentFloorID~0); 937387#L2422-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 887150#L2428-13 assume { :end_inline_continueInDirection } true; 881841#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 881842#L3207-2 assume !(-1 == ~expectedDirection~0); 882500#L3219-2 assume !(1 == ~expectedDirection~0); 882501#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 882385#L2719-2 assume { :end_inline_timeShift } true; 882386#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 883046#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 883023#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 882802#L765-1 assume 0 == initPersonOnFloor_~floor; 881861#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 881486#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 886032#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 887637#L569-5 assume { :end_inline_callOnFloor } true; 953755#L909-1 assume { :end_inline_initPersonOnFloor } true; 953752#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 953751#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 953733#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 953732#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 939273#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 939271#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 939266#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 936619#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 936618#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 936617#L494-63 assume !(0 == isFloorCalling_~floorID); 936610#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 936608#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 936593#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 936594#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 936601#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 936597#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 936595#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 936596#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 951962#L2596-6 assume !(0 != timeShift_~tmp___9~2); 951961#L2687-9 assume !(1 == ~doorState~0); 953483#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 953478#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 953479#L2205-6 assume !(0 == ~currentFloorID~0); 884760#L2211-6 assume ~currentFloorID~0 > 0; 884761#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 884848#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 886033#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 884678#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 882689#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 954991#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 883575#L2412-9 assume !(1 == ~currentHeading~0); 883576#L2422-27 assume !(0 == ~currentFloorID~0); 883464#L2422-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 886526#L2428-19 assume { :end_inline_continueInDirection } true; 881845#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 881846#L3207-3 assume !(-1 == ~expectedDirection~0); 882494#L3219-3 assume !(1 == ~expectedDirection~0); 882495#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 882391#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 882389#L1268-3 [2018-11-18 12:53:48,849 INFO L796 eck$LassoCheckResult]: Loop: 882389#L1268-3 assume true; 887625#L1268-1 assume !false; 887617#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 887544#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 882469#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 882470#L1276 assume 1 != cleanup_~tmp___0~0; 882655#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 882656#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 886931#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 887870#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 881757#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 881758#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 882326#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 881447#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 881448#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 882004#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 882005#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 884281#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 883165#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 883166#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 883125#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 953842#L494-89 assume !(0 == isFloorCalling_~floorID); 953835#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 953832#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 953828#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 953829#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 953839#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 953833#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 953830#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 953831#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 954858#L2596-8 assume !(0 != timeShift_~tmp___9~2); 882598#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 882599#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 882602#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 884339#L2205-8 assume !(0 == ~currentFloorID~0); 884340#L2211-8 assume ~currentFloorID~0 > 0; 884763#L2212-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 883071#L2226-8 assume ~currentFloorID~0 > 0; 882980#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 882981#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 882673#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 954727#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 883589#L2412-12 assume !(1 == ~currentHeading~0); 883590#L2422-36 assume !(0 == ~currentFloorID~0); 883421#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 886523#L2428-25 assume { :end_inline_continueInDirection } true; 881830#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 881831#L3207-4 assume !(-1 == ~expectedDirection~0); 882497#L3219-4 assume !(1 == ~expectedDirection~0); 882498#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 882388#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 882389#L1268-3 [2018-11-18 12:53:48,858 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:48,858 INFO L82 PathProgramCache]: Analyzing trace with hash 544978829, now seen corresponding path program 1 times [2018-11-18 12:53:48,858 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:48,858 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:48,858 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:48,859 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:48,859 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:48,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:49,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:49,609 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:49,611 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:49,614 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:49,614 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:49,614 INFO L82 PathProgramCache]: Analyzing trace with hash 1483310802, now seen corresponding path program 1 times [2018-11-18 12:53:49,614 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:49,615 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:49,615 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:49,615 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:49,615 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:49,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:49,637 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:49,637 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:49,637 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:49,637 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:49,638 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 12:53:49,638 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 12:53:49,638 INFO L87 Difference]: Start difference. First operand 73689 states and 135247 transitions. cyclomatic complexity: 61559 Second operand 4 states. [2018-11-18 12:53:50,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:53:50,597 INFO L93 Difference]: Finished difference Result 95713 states and 174321 transitions. [2018-11-18 12:53:50,598 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:53:50,598 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95713 states and 174321 transitions. [2018-11-18 12:53:50,839 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 22324 [2018-11-18 12:53:51,025 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95713 states to 95713 states and 174321 transitions. [2018-11-18 12:53:51,025 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 95713 [2018-11-18 12:53:51,079 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 95713 [2018-11-18 12:53:51,079 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95713 states and 174321 transitions. [2018-11-18 12:53:51,121 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:53:51,121 INFO L705 BuchiCegarLoop]: Abstraction has 95713 states and 174321 transitions. [2018-11-18 12:53:51,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95713 states and 174321 transitions. [2018-11-18 12:53:51,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95713 to 73689. [2018-11-18 12:53:51,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73689 states. [2018-11-18 12:53:54,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73689 states to 73689 states and 134719 transitions. [2018-11-18 12:53:54,532 INFO L728 BuchiCegarLoop]: Abstraction has 73689 states and 134719 transitions. [2018-11-18 12:53:54,532 INFO L608 BuchiCegarLoop]: Abstraction has 73689 states and 134719 transitions. [2018-11-18 12:53:54,532 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-18 12:53:54,532 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 73689 states and 134719 transitions. [2018-11-18 12:53:54,646 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17506 [2018-11-18 12:53:54,646 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:53:54,646 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:53:54,649 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:54,649 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:53:54,649 INFO L794 eck$LassoCheckResult]: Stem: 1052596#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1052597#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 1052191#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1052192#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1051987#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1051988#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 1052364#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1056078#L487 assume { :end_inline_initFloors } true; 1052085#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1052086#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1052457#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1052221#L765 assume 0 == initPersonOnFloor_~floor; 1051279#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1050886#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1055501#L557 assume !(0 == callOnFloor_~floorID); 1057231#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1052198#L569-2 assume { :end_inline_callOnFloor } true; 1073288#L909 assume { :end_inline_initPersonOnFloor } true; 1073287#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1073286#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1073285#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1073283#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1073284#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1073317#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1073313#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1073263#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1073257#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1073256#L494 assume !(0 == isFloorCalling_~floorID); 1073255#L498 assume !(1 == isFloorCalling_~floorID); 1073253#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1073251#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1073250#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1073249#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1073226#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1073225#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1073223#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1073222#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1073221#L2596 assume !(0 != timeShift_~tmp___9~2); 1073220#L2687 assume !(1 == ~doorState~0); 1073219#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1073218#L2036 assume !(1 == stopRequestedInDirection_~dir); 1073217#L2205 assume !(0 == ~currentFloorID~0); 1073216#L2211 assume ~currentFloorID~0 > 0; 1073215#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1073214#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1073213#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1054126#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1051185#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1073864#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1073860#L2412 assume !(1 == ~currentHeading~0); 1073858#L2422 assume !(0 == ~currentFloorID~0); 1073853#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1073409#L2428-1 assume { :end_inline_continueInDirection } true; 1073406#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1073404#L3207 assume !(-1 == ~expectedDirection~0); 1073397#L3219 assume !(1 == ~expectedDirection~0); 1073394#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1073393#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1073392#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1073390#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1073386#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1073383#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1073381#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1073380#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1073374#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1073370#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1072845#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1072844#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1072843#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1072841#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1072842#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1078433#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1057942#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1057936#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1057929#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1057931#L2687-3 assume !(1 == ~doorState~0); 1074327#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1074325#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1074326#L2205-2 assume !(0 == ~currentFloorID~0); 1074527#L2211-2 assume ~currentFloorID~0 > 0; 1074061#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1074044#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1074023#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1074009#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1073986#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1073967#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1069210#L2412-3 assume !(1 == ~currentHeading~0); 1066044#L2422-9 assume !(0 == ~currentFloorID~0); 1066015#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1066016#L2428-7 assume { :end_inline_continueInDirection } true; 1073564#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1066011#L3207-1 assume !(-1 == ~expectedDirection~0); 1065995#L3219-1 assume !(1 == ~expectedDirection~0); 1065988#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1065984#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1065980#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1065978#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1065975#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1065968#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1062168#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1062102#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1062099#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1061991#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1058397#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1058395#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1058394#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1058393#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1058390#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1058387#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1058385#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1058384#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1058382#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1058381#L2687-6 assume !(1 == ~doorState~0); 1058380#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1058378#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1058379#L2205-4 assume !(0 == ~currentFloorID~0); 1062094#L2211-4 assume !(~currentFloorID~0 > 0); 1062092#L2226-4 assume ~currentFloorID~0 > 0; 1062093#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1065891#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1065892#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1110870#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1110866#L2412-6 assume !(1 == ~currentHeading~0); 1108946#L2422-18 assume !(0 == ~currentFloorID~0); 1108943#L2422-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1108944#L2428-13 assume { :end_inline_continueInDirection } true; 1110512#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1110510#L3207-2 assume !(-1 == ~expectedDirection~0); 1110507#L3219-2 assume !(1 == ~expectedDirection~0); 1110505#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1110504#L2719-2 assume { :end_inline_timeShift } true; 1110503#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1110394#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1110011#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1110010#L765-1 assume 0 == initPersonOnFloor_~floor; 1109950#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1109920#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1109918#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1108827#L569-5 assume { :end_inline_callOnFloor } true; 1108825#L909-1 assume { :end_inline_initPersonOnFloor } true; 1108822#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1108820#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1108819#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1108817#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1108818#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1110212#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1110208#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1108791#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1108790#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1108788#L494-63 assume !(0 == isFloorCalling_~floorID); 1108779#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1108775#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1108769#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1108621#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1108400#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1108397#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1108393#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1108390#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1108387#L2596-6 assume !(0 != timeShift_~tmp___9~2); 1108382#L2687-9 assume !(1 == ~doorState~0); 1108379#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1108371#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1108370#L2205-6 assume !(0 == ~currentFloorID~0); 1108309#L2211-6 assume ~currentFloorID~0 > 0; 1108308#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1108307#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1108288#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1108274#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1052452#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1108250#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1108247#L2412-9 assume !(1 == ~currentHeading~0); 1108244#L2422-27 assume !(0 == ~currentFloorID~0); 1108240#L2422-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1108241#L2428-19 assume { :end_inline_continueInDirection } true; 1114749#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1108472#L3207-3 assume !(-1 == ~expectedDirection~0); 1108084#L3219-3 assume !(1 == ~expectedDirection~0); 1107922#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1107905#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 1107883#L1268-3 [2018-11-18 12:53:54,652 INFO L796 eck$LassoCheckResult]: Loop: 1107883#L1268-3 assume true; 1107876#L1268-1 assume !false; 1107871#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1107863#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1107857#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1107788#L1276 assume 1 != cleanup_~tmp___0~0; 1107783#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1107781#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1107780#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1107779#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1100552#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1107778#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1107777#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1107775#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1107773#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1107770#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1107766#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1107751#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1107743#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1107735#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1107734#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1107733#L494-89 assume !(0 == isFloorCalling_~floorID); 1107726#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1107723#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1107719#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1107721#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1107730#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1107724#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1107722#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1107709#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1107710#L2596-8 assume !(0 != timeShift_~tmp___9~2); 1114777#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1108844#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1108839#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1108840#L2205-8 assume !(0 == ~currentFloorID~0); 1108671#L2211-8 assume ~currentFloorID~0 > 0; 1108669#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1108667#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1108666#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1108460#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1052448#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1108439#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1108436#L2412-12 assume !(1 == ~currentHeading~0); 1108434#L2422-36 assume !(0 == ~currentFloorID~0); 1108430#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1108420#L2428-25 assume { :end_inline_continueInDirection } true; 1108414#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1108410#L3207-4 assume !(-1 == ~expectedDirection~0); 1107927#L3219-4 assume !(1 == ~expectedDirection~0); 1107923#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1107906#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 1107883#L1268-3 [2018-11-18 12:53:54,660 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:54,660 INFO L82 PathProgramCache]: Analyzing trace with hash 544978829, now seen corresponding path program 2 times [2018-11-18 12:53:54,660 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:54,660 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:54,661 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:54,661 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:53:54,661 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:54,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:55,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:55,417 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:55,417 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:53:55,417 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:53:55,417 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:53:55,417 INFO L82 PathProgramCache]: Analyzing trace with hash 1626114101, now seen corresponding path program 1 times [2018-11-18 12:53:55,418 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:53:55,418 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:53:55,418 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:55,418 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:53:55,418 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:53:55,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:53:55,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:53:55,454 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:53:55,454 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:53:55,454 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:53:55,455 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:53:55,455 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:53:55,455 INFO L87 Difference]: Start difference. First operand 73689 states and 134719 transitions. cyclomatic complexity: 61031 Second operand 5 states. [2018-11-18 12:54:02,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:54:02,820 INFO L93 Difference]: Finished difference Result 133987 states and 244449 transitions. [2018-11-18 12:54:02,820 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 12:54:02,820 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 133987 states and 244449 transitions. [2018-11-18 12:54:03,153 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34856 [2018-11-18 12:54:03,409 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 133987 states to 133987 states and 244449 transitions. [2018-11-18 12:54:03,409 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 133987 [2018-11-18 12:54:03,483 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 133987 [2018-11-18 12:54:03,483 INFO L73 IsDeterministic]: Start isDeterministic. Operand 133987 states and 244449 transitions. [2018-11-18 12:54:03,543 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:54:03,544 INFO L705 BuchiCegarLoop]: Abstraction has 133987 states and 244449 transitions. [2018-11-18 12:54:03,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133987 states and 244449 transitions. [2018-11-18 12:54:04,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133987 to 131271. [2018-11-18 12:54:04,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 131271 states. [2018-11-18 12:54:04,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 131271 states to 131271 states and 240287 transitions. [2018-11-18 12:54:04,379 INFO L728 BuchiCegarLoop]: Abstraction has 131271 states and 240287 transitions. [2018-11-18 12:54:04,379 INFO L608 BuchiCegarLoop]: Abstraction has 131271 states and 240287 transitions. [2018-11-18 12:54:04,379 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-18 12:54:04,379 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 131271 states and 240287 transitions. [2018-11-18 12:54:04,847 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34100 [2018-11-18 12:54:04,847 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:54:04,847 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:54:04,849 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:04,849 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:04,849 INFO L794 eck$LassoCheckResult]: Stem: 1260293#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1260294#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 1259887#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1259888#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1259680#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1259681#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 1260064#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1263802#L487 assume { :end_inline_initFloors } true; 1259782#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1259783#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1260161#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1259915#L765 assume 0 == initPersonOnFloor_~floor; 1258970#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1258581#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1263245#L557 assume !(0 == callOnFloor_~floorID); 1264962#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1259894#L569-2 assume { :end_inline_callOnFloor } true; 1259896#L909 assume { :end_inline_initPersonOnFloor } true; 1260668#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1258575#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1258576#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1259095#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1259096#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1261623#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1260245#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1260246#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1262143#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1264290#L494 assume !(0 == isFloorCalling_~floorID); 1264259#L498 assume !(1 == isFloorCalling_~floorID); 1262973#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1262174#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1262515#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1261628#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1261159#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1260237#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1260238#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1263569#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1265631#L2596 assume !(0 != timeShift_~tmp___9~2); 1259830#L2687 assume !(1 == ~doorState~0); 1259724#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1259725#L2036 assume !(1 == stopRequestedInDirection_~dir); 1261488#L2205 assume !(0 == ~currentFloorID~0); 1261489#L2211 assume ~currentFloorID~0 > 0; 1261859#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1261860#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1263202#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1263203#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1265658#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1265659#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1266563#L2412 assume !(1 == ~currentHeading~0); 1266561#L2422 assume !(0 == ~currentFloorID~0); 1266558#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1266554#L2428-1 assume { :end_inline_continueInDirection } true; 1266551#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1266549#L3207 assume !(-1 == ~expectedDirection~0); 1266538#L3219 assume !(1 == ~expectedDirection~0); 1266509#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1266446#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1266442#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1266441#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1266440#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1266439#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1266438#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1266437#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1266436#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1266435#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1266434#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1266432#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1266431#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1266430#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1266429#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1266424#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1266422#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1266421#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1266419#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1266418#L2687-3 assume !(1 == ~doorState~0); 1266417#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1266415#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1266405#L2205-2 assume !(0 == ~currentFloorID~0); 1266407#L2211-2 assume ~currentFloorID~0 > 0; 1261937#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1264382#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1264383#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1261843#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1258801#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1258802#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1374346#L2412-3 assume !(1 == ~currentHeading~0); 1332588#L2422-9 assume !(0 == ~currentFloorID~0); 1267970#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1267967#L2428-7 assume { :end_inline_continueInDirection } true; 1374345#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1374343#L3207-1 assume !(-1 == ~expectedDirection~0); 1374256#L3219-1 assume !(1 == ~expectedDirection~0); 1366156#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1365534#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1351308#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1351307#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1351306#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1287360#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1292557#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1292559#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1292541#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1292543#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1292526#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1292527#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1305393#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1305390#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1305384#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1305377#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1305368#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1305363#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1305356#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1305347#L2687-6 assume !(1 == ~doorState~0); 1305337#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1305328#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1305329#L2205-4 assume !(0 == ~currentFloorID~0); 1305842#L2211-4 assume !(~currentFloorID~0 > 0); 1324839#L2226-4 assume ~currentFloorID~0 > 0; 1324840#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1372833#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1258803#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1258804#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1389816#L2412-6 assume !(1 == ~currentHeading~0); 1373285#L2422-18 assume !(0 == ~currentFloorID~0); 1373279#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1373117#L2428-13 assume { :end_inline_continueInDirection } true; 1374383#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1374381#L3207-2 assume !(-1 == ~expectedDirection~0); 1374377#L3219-2 assume !(1 == ~expectedDirection~0); 1374375#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1374366#L2719-2 assume { :end_inline_timeShift } true; 1374364#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1374355#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1374289#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1373725#L765-1 assume 0 == initPersonOnFloor_~floor; 1369364#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1369335#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1369333#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1369334#L569-5 assume { :end_inline_callOnFloor } true; 1366146#L909-1 assume { :end_inline_initPersonOnFloor } true; 1326309#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1300451#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1300446#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1300436#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1276152#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1325551#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1341482#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1341480#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1341481#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1386463#L494-63 assume !(0 == isFloorCalling_~floorID); 1386460#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1386458#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1386457#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1386456#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1386453#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1386451#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1386449#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1386448#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1386446#L2596-6 assume !(0 != timeShift_~tmp___9~2); 1340978#L2687-9 assume !(1 == ~doorState~0); 1386442#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1386439#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1386438#L2205-6 assume !(0 == ~currentFloorID~0); 1386437#L2211-6 assume ~currentFloorID~0 > 0; 1374254#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1386435#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1386434#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1386409#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1386388#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1386389#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1389818#L2412-9 assume !(1 == ~currentHeading~0); 1373885#L2422-27 assume !(0 == ~currentFloorID~0); 1263736#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1263737#L2428-19 assume { :end_inline_continueInDirection } true; 1387267#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1387264#L3207-3 assume !(-1 == ~expectedDirection~0); 1387258#L3219-3 assume !(1 == ~expectedDirection~0); 1387253#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1387250#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 1387249#L1268-3 [2018-11-18 12:54:04,852 INFO L796 eck$LassoCheckResult]: Loop: 1387249#L1268-3 assume true; 1387248#L1268-1 assume !false; 1387247#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1387246#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1387245#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1387244#L1276 assume 1 != cleanup_~tmp___0~0; 1387243#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1387242#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1387241#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1265224#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1265225#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1259439#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1259440#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1365236#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1300440#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1300441#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1301362#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1349094#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1349085#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1349082#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1349083#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1383662#L494-89 assume !(0 == isFloorCalling_~floorID); 1383659#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1383653#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1383648#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1383649#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1383655#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1383652#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1383650#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1383651#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1383639#L2596-8 assume !(0 != timeShift_~tmp___9~2); 1348530#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1387565#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1387563#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1387562#L2205-8 assume !(0 == ~currentFloorID~0); 1387561#L2211-8 assume ~currentFloorID~0 > 0; 1268761#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1387560#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1387559#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1387532#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1382606#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1387512#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1260724#L2412-12 assume !(1 == ~currentHeading~0); 1260725#L2422-36 assume !(0 == ~currentFloorID~0); 1263731#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1263734#L2428-25 assume { :end_inline_continueInDirection } true; 1387266#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1387261#L3207-4 assume !(-1 == ~expectedDirection~0); 1387255#L3219-4 assume !(1 == ~expectedDirection~0); 1387252#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1387251#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 1387249#L1268-3 [2018-11-18 12:54:04,861 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:04,861 INFO L82 PathProgramCache]: Analyzing trace with hash -588195695, now seen corresponding path program 1 times [2018-11-18 12:54:04,861 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:04,861 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:04,862 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:04,862 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:04,862 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:04,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:05,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:05,594 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:05,594 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:54:05,595 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:54:05,595 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:05,595 INFO L82 PathProgramCache]: Analyzing trace with hash -893845833, now seen corresponding path program 1 times [2018-11-18 12:54:05,595 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:05,595 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:05,595 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:05,596 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:05,596 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:05,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:05,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:05,618 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:05,618 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:54:05,618 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:54:05,619 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:54:05,619 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:54:05,619 INFO L87 Difference]: Start difference. First operand 131271 states and 240287 transitions. cyclomatic complexity: 109017 Second operand 3 states. [2018-11-18 12:54:07,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:54:07,552 INFO L93 Difference]: Finished difference Result 170661 states and 311687 transitions. [2018-11-18 12:54:07,552 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:54:07,552 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 170661 states and 311687 transitions. [2018-11-18 12:54:07,968 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 43152 [2018-11-18 12:54:08,285 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 170661 states to 170661 states and 311687 transitions. [2018-11-18 12:54:08,285 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 170661 [2018-11-18 12:54:08,380 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 170661 [2018-11-18 12:54:08,380 INFO L73 IsDeterministic]: Start isDeterministic. Operand 170661 states and 311687 transitions. [2018-11-18 12:54:08,453 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:54:08,453 INFO L705 BuchiCegarLoop]: Abstraction has 170661 states and 311687 transitions. [2018-11-18 12:54:08,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170661 states and 311687 transitions. [2018-11-18 12:54:09,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170661 to 167393. [2018-11-18 12:54:09,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167393 states. [2018-11-18 12:54:09,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167393 states to 167393 states and 306339 transitions. [2018-11-18 12:54:09,536 INFO L728 BuchiCegarLoop]: Abstraction has 167393 states and 306339 transitions. [2018-11-18 12:54:09,537 INFO L608 BuchiCegarLoop]: Abstraction has 167393 states and 306339 transitions. [2018-11-18 12:54:09,537 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-18 12:54:09,537 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 167393 states and 306339 transitions. [2018-11-18 12:54:09,836 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 42212 [2018-11-18 12:54:09,836 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:54:09,836 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:54:09,839 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:09,839 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:09,839 INFO L794 eck$LassoCheckResult]: Stem: 1562217#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1562218#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 1561816#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1561817#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1561606#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1561607#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 1561994#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1565782#L487 assume { :end_inline_initFloors } true; 1561706#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1561707#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1562086#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1561846#L765 assume 0 == initPersonOnFloor_~floor; 1560911#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1560521#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1565204#L557 assume !(0 == callOnFloor_~floorID); 1566969#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1561823#L569-2 assume { :end_inline_callOnFloor } true; 1569231#L909 assume { :end_inline_initPersonOnFloor } true; 1569230#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1569229#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1569228#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1569227#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1569226#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1569224#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1569220#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1569219#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1569189#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1566275#L494 assume !(0 == isFloorCalling_~floorID); 1566276#L498 assume !(1 == isFloorCalling_~floorID); 1568768#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1568767#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1564472#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1564474#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1568757#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1568758#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1565547#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1565548#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1568778#L2596 assume !(0 != timeShift_~tmp___9~2); 1568779#L2687 assume !(1 == ~doorState~0); 1568743#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1568744#L2036 assume !(1 == stopRequestedInDirection_~dir); 1568733#L2205 assume !(0 == ~currentFloorID~0); 1568732#L2211 assume ~currentFloorID~0 > 0; 1568731#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1566270#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1565161#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1565162#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1568623#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1568624#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1569559#L2412 assume !(1 == ~currentHeading~0); 1569556#L2422 assume !(0 == ~currentFloorID~0); 1569551#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1569543#L2428-1 assume { :end_inline_continueInDirection } true; 1569535#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1569531#L3207 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1569529#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 1569527#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 1569524#L3219 assume !(1 == ~expectedDirection~0); 1569522#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1569521#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1569520#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1569519#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1569518#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1569516#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1569515#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1569514#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1569513#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1569512#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1569511#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1569509#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1569508#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1569506#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1569503#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1569505#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1569737#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1569736#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1569734#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1569733#L2687-3 assume !(1 == ~doorState~0); 1569732#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1569730#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1569719#L2205-2 assume !(0 == ~currentFloorID~0); 1569721#L2211-2 assume ~currentFloorID~0 > 0; 1569758#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1582869#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1582868#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1582708#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1582640#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1582624#L2695-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1577689#L2412-3 assume !(1 == ~currentHeading~0); 1582611#L2422-9 assume !(0 == ~currentFloorID~0); 1577510#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1577508#L2428-7 assume { :end_inline_continueInDirection } true; 1582602#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1582358#L3207-1 assume !(-1 == ~expectedDirection~0); 1582359#L3219-1 assume !(1 == ~expectedDirection~0); 1582337#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1582338#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1581528#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1581529#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1581525#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1577277#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1574290#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1574288#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1574287#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1574286#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1574285#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1574283#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1574282#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1574281#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1574278#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1574275#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1574273#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1574272#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1574270#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1574269#L2687-6 assume !(1 == ~doorState~0); 1574268#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1574267#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1574262#L2205-4 assume !(0 == ~currentFloorID~0); 1574263#L2211-4 assume !(~currentFloorID~0 > 0); 1577536#L2226-4 assume ~currentFloorID~0 > 0; 1577537#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1600994#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1600995#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1614651#L2695-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1614648#L2412-6 assume !(1 == ~currentHeading~0); 1581606#L2422-18 assume !(0 == ~currentFloorID~0); 1565864#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1565865#L2428-13 assume { :end_inline_continueInDirection } true; 1614188#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1695781#L3207-2 assume !(-1 == ~expectedDirection~0); 1695777#L3219-2 assume !(1 == ~expectedDirection~0); 1695775#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1695774#L2719-2 assume { :end_inline_timeShift } true; 1695773#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1695770#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1695766#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1695765#L765-1 assume 0 == initPersonOnFloor_~floor; 1695762#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1695737#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1695735#L557-2 assume !(0 == callOnFloor_~floorID); 1695731#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1695730#L569-5 assume { :end_inline_callOnFloor } true; 1695729#L909-1 assume { :end_inline_initPersonOnFloor } true; 1601444#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1601443#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1601442#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1601440#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1595559#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1601437#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1601435#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1601433#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1601431#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1601430#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1601428#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1601422#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1601351#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1601350#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1601347#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1601345#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1601344#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1601343#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1601339#L2596-6 assume !(0 != timeShift_~tmp___9~2); 1601336#L2687-9 assume !(1 == ~doorState~0); 1601335#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1601332#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1601333#L2205-6 assume !(0 == ~currentFloorID~0); 1623104#L2211-6 assume !(~currentFloorID~0 > 0); 1726342#L2226-6 assume ~currentFloorID~0 > 0; 1726343#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1726977#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1662555#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1726970#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1726969#L2412-9 assume !(1 == ~currentHeading~0); 1570856#L2422-27 assume !(0 == ~currentFloorID~0); 1562523#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1695434#L2428-19 assume { :end_inline_continueInDirection } true; 1695430#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1695428#L3207-3 assume !(-1 == ~expectedDirection~0); 1695402#L3219-3 assume !(1 == ~expectedDirection~0); 1695329#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1694251#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 1694249#L1268-3 [2018-11-18 12:54:09,841 INFO L796 eck$LassoCheckResult]: Loop: 1694249#L1268-3 assume true; 1694247#L1268-1 assume !false; 1694245#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1694243#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1694241#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1694239#L1276 assume 1 != cleanup_~tmp___0~0; 1694237#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1694230#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1694226#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1694224#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 1637581#L1944 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1628445#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1628439#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1628440#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1628419#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1628420#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1628415#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1626004#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1628413#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1628411#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1628410#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1628409#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1628408#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1628405#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1628406#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1709168#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1709161#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1709157#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1709155#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1709154#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1709148#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1709145#L2596-8 assume !(0 != timeShift_~tmp___9~2); 1709146#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1720278#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1720276#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1720274#L2205-8 assume !(0 == ~currentFloorID~0); 1720275#L2211-8 assume !(~currentFloorID~0 > 0); 1720306#L2226-8 assume ~currentFloorID~0 > 0; 1720307#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1720245#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1637973#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1720216#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1720214#L2412-12 assume !(1 == ~currentHeading~0); 1570851#L2422-36 assume !(0 == ~currentFloorID~0); 1562474#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1704833#L2428-25 assume { :end_inline_continueInDirection } true; 1704830#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1696201#L3207-4 assume !(-1 == ~expectedDirection~0); 1696202#L3219-4 assume !(1 == ~expectedDirection~0); 1694255#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1694252#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 1694249#L1268-3 [2018-11-18 12:54:09,850 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:09,850 INFO L82 PathProgramCache]: Analyzing trace with hash 458582764, now seen corresponding path program 1 times [2018-11-18 12:54:09,850 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:09,850 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:09,850 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:09,850 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:09,850 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:09,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:10,559 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:10,560 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:10,560 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:54:10,560 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:54:10,560 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:10,560 INFO L82 PathProgramCache]: Analyzing trace with hash 1289307436, now seen corresponding path program 1 times [2018-11-18 12:54:10,560 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:10,560 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:10,561 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:10,561 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:10,561 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:10,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:10,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:10,582 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:10,582 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:54:10,582 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:54:10,582 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:54:10,582 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:54:10,582 INFO L87 Difference]: Start difference. First operand 167393 states and 306339 transitions. cyclomatic complexity: 138947 Second operand 5 states. [2018-11-18 12:54:15,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:54:15,056 INFO L93 Difference]: Finished difference Result 285869 states and 524888 transitions. [2018-11-18 12:54:15,057 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 12:54:15,057 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 285869 states and 524888 transitions. [2018-11-18 12:54:15,810 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 74665 [2018-11-18 12:54:16,425 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 285869 states to 284757 states and 522986 transitions. [2018-11-18 12:54:16,425 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 284757 [2018-11-18 12:54:16,591 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 284757 [2018-11-18 12:54:16,592 INFO L73 IsDeterministic]: Start isDeterministic. Operand 284757 states and 522986 transitions. [2018-11-18 12:54:16,716 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:54:16,716 INFO L705 BuchiCegarLoop]: Abstraction has 284757 states and 522986 transitions. [2018-11-18 12:54:16,844 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284757 states and 522986 transitions. [2018-11-18 12:54:18,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284757 to 166593. [2018-11-18 12:54:18,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 166593 states. [2018-11-18 12:54:18,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166593 states to 166593 states and 304603 transitions. [2018-11-18 12:54:18,910 INFO L728 BuchiCegarLoop]: Abstraction has 166593 states and 304603 transitions. [2018-11-18 12:54:18,910 INFO L608 BuchiCegarLoop]: Abstraction has 166593 states and 304603 transitions. [2018-11-18 12:54:18,910 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-18 12:54:18,910 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 166593 states and 304603 transitions. [2018-11-18 12:54:19,200 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 42050 [2018-11-18 12:54:19,200 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:54:19,200 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:54:19,203 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:19,203 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:19,204 INFO L794 eck$LassoCheckResult]: Stem: 2015514#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2015515#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 2015111#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2015112#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 2014898#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 2014899#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 2015292#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2019116#L487 assume { :end_inline_initFloors } true; 2014997#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2014998#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2015381#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2015140#L765 assume 0 == initPersonOnFloor_~floor; 2014200#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2013805#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2018504#L557 assume !(0 == callOnFloor_~floorID); 2020354#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2015118#L569-2 assume { :end_inline_callOnFloor } true; 2015120#L909 assume { :end_inline_initPersonOnFloor } true; 2015894#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2015895#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2015944#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2015945#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2019702#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2019703#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2015463#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 2015464#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2021857#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2021856#L494 assume !(0 == isFloorCalling_~floorID); 2021854#L498 assume !(1 == isFloorCalling_~floorID); 2021852#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2021849#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2021718#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2021717#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2021712#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2021710#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2021707#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2021705#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2021702#L2596 assume !(0 != timeShift_~tmp___9~2); 2021700#L2687 assume !(1 == ~doorState~0); 2021698#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2021693#L2036 assume !(1 == stopRequestedInDirection_~dir); 2021687#L2205 assume !(0 == ~currentFloorID~0); 2021685#L2211 assume ~currentFloorID~0 > 0; 2021684#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2021663#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2021641#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2021623#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2021361#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2021355#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2021344#L2412 assume !(1 == ~currentHeading~0); 2021335#L2422 assume !(0 == ~currentFloorID~0); 2021326#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2021321#L2428-1 assume { :end_inline_continueInDirection } true; 2021313#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2021309#L3207 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2021307#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 2021305#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 2021302#L3219 assume !(1 == ~expectedDirection~0); 2021300#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2021299#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2021298#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2021297#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2021296#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2021294#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2021292#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2021290#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2021288#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2021286#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2021285#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2021283#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2021282#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2021281#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2021280#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2021279#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2021277#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2021276#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2021274#L2596-2 assume !(0 != timeShift_~tmp___9~2); 2021273#L2687-3 assume !(1 == ~doorState~0); 2021272#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2021270#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 2021271#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2021228#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2021855#L2695-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2021215#L2467-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~21 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2021850#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2021848#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 2021372#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2021357#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2021345#L2704-3 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2021336#L2412-5 assume !(1 == ~currentHeading~0); 2021327#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2021208#L2422-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2021209#L2428-11 assume { :end_inline_continueInDirection } true; 2027724#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2027719#L3207-1 assume !(-1 == ~expectedDirection~0); 2027718#L3219-1 assume !(1 == ~expectedDirection~0); 2027707#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2027706#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2027700#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2027697#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2027693#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2027425#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2027687#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2027548#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2027441#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2027434#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2027426#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2027416#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2027404#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2027287#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2027285#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2027284#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2027281#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2027279#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2027277#L2596-4 assume !(0 != timeShift_~tmp___9~2); 2027275#L2687-6 assume !(1 == ~doorState~0); 2027273#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2027270#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 2027271#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2027181#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2057901#L2695-4 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2027148#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2057891#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2057886#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 2057842#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2057263#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2057264#L2704-6 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2057276#L2412-8 assume !(1 == ~currentHeading~0); 2057259#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2027117#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2027113#L2428-17 assume { :end_inline_continueInDirection } true; 2027111#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2027107#L3207-2 assume !(-1 == ~expectedDirection~0); 2027103#L3219-2 assume !(1 == ~expectedDirection~0); 2027099#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2027097#L2719-2 assume { :end_inline_timeShift } true; 2027090#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2027086#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2027082#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2027081#L765-1 assume 0 == initPersonOnFloor_~floor; 2027071#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2027011#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2027008#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2027009#L569-5 assume { :end_inline_callOnFloor } true; 2074425#L909-1 assume { :end_inline_initPersonOnFloor } true; 2074424#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2074423#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2074422#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2074421#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 2074420#L3077-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2074362#L1849-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2074363#L1870-33 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2180169#L3081-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 2072896#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2072897#L494-63 assume !(0 == isFloorCalling_~floorID); 2092196#L498-63 assume !(1 == isFloorCalling_~floorID); 2092194#L502-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2092192#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2092191#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2064553#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2064554#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2064546#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2064547#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2064541#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2064542#L2596-6 assume !(0 != timeShift_~tmp___9~2); 2064536#L2687-9 assume !(1 == ~doorState~0); 2064537#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2064532#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 2026840#L2205-6 assume !(0 == ~currentFloorID~0); 2026841#L2211-6 assume !(~currentFloorID~0 > 0); 2075793#L2226-6 assume ~currentFloorID~0 > 0; 2096764#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2099904#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2099905#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2108043#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2108044#L2412-9 assume !(1 == ~currentHeading~0); 2096057#L2422-27 assume !(0 == ~currentFloorID~0); 2096054#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2093123#L2428-19 assume { :end_inline_continueInDirection } true; 2131667#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2131659#L3207-3 assume !(-1 == ~expectedDirection~0); 2131656#L3219-3 assume !(1 == ~expectedDirection~0); 2131648#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2131646#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 2131645#L1268-3 [2018-11-18 12:54:19,209 INFO L796 eck$LassoCheckResult]: Loop: 2131645#L1268-3 assume true; 2131644#L1268-1 assume !false; 2131643#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2131642#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 2131641#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 2131640#L1276 assume 1 != cleanup_~tmp___0~0; 2131639#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2131638#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2131637#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 2131636#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 2129251#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 2131635#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 2131634#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2131633#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2131632#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2131631#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2090207#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2131628#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2131626#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2131624#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2131621#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2131623#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2169264#L494-89 assume !(0 == isFloorCalling_~floorID); 2169250#L498-89 assume !(1 == isFloorCalling_~floorID); 2169237#L502-89 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2169234#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2023479#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2023481#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2129132#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2129130#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2129129#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2129128#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2129127#L2596-8 assume !(0 != timeShift_~tmp___9~2); 2022682#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2022674#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2022675#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 2130986#L2205-8 assume !(0 == ~currentFloorID~0); 2132389#L2211-8 assume !(~currentFloorID~0 > 0); 2132390#L2226-8 assume ~currentFloorID~0 > 0; 2132386#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2131960#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2125086#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2131685#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2131681#L2412-12 assume !(1 == ~currentHeading~0); 2095970#L2422-36 assume !(0 == ~currentFloorID~0); 2095967#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2093086#L2428-25 assume { :end_inline_continueInDirection } true; 2131668#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2131665#L3207-4 assume !(-1 == ~expectedDirection~0); 2131657#L3219-4 assume !(1 == ~expectedDirection~0); 2131649#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2131647#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 2131645#L1268-3 [2018-11-18 12:54:19,215 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:19,216 INFO L82 PathProgramCache]: Analyzing trace with hash -283088491, now seen corresponding path program 1 times [2018-11-18 12:54:19,216 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:19,216 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:19,216 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:19,216 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:19,216 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:19,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:19,924 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:19,924 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:19,924 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:54:19,924 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:54:19,924 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:19,924 INFO L82 PathProgramCache]: Analyzing trace with hash -861521114, now seen corresponding path program 1 times [2018-11-18 12:54:19,925 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:19,925 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:19,925 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:19,925 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:19,925 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:19,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:19,975 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:19,975 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:19,975 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 12:54:19,975 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:54:19,975 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 12:54:19,975 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 12:54:19,975 INFO L87 Difference]: Start difference. First operand 166593 states and 304603 transitions. cyclomatic complexity: 138011 Second operand 7 states. [2018-11-18 12:54:30,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:54:30,680 INFO L93 Difference]: Finished difference Result 314168 states and 568619 transitions. [2018-11-18 12:54:30,680 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-18 12:54:30,680 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 314168 states and 568619 transitions. [2018-11-18 12:54:31,417 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 79361 [2018-11-18 12:54:32,035 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 314168 states to 314168 states and 568619 transitions. [2018-11-18 12:54:32,036 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 314168 [2018-11-18 12:54:32,186 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 314168 [2018-11-18 12:54:32,186 INFO L73 IsDeterministic]: Start isDeterministic. Operand 314168 states and 568619 transitions. [2018-11-18 12:54:32,304 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:54:32,304 INFO L705 BuchiCegarLoop]: Abstraction has 314168 states and 568619 transitions. [2018-11-18 12:54:32,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314168 states and 568619 transitions. [2018-11-18 12:54:34,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314168 to 222565. [2018-11-18 12:54:34,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 222565 states. [2018-11-18 12:54:34,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 222565 states to 222565 states and 407551 transitions. [2018-11-18 12:54:34,393 INFO L728 BuchiCegarLoop]: Abstraction has 222565 states and 407551 transitions. [2018-11-18 12:54:34,393 INFO L608 BuchiCegarLoop]: Abstraction has 222565 states and 407551 transitions. [2018-11-18 12:54:34,393 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-18 12:54:34,393 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 222565 states and 407551 transitions. [2018-11-18 12:54:34,794 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 57022 [2018-11-18 12:54:34,795 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:54:34,795 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:54:34,797 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:34,797 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:34,798 INFO L794 eck$LassoCheckResult]: Stem: 2496295#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2496296#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 2495890#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2495891#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 2495690#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 2495691#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 2496067#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2499854#L487 assume { :end_inline_initFloors } true; 2495786#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2495787#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2496163#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2495918#L765 assume 0 == initPersonOnFloor_~floor; 2494993#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2494600#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2499254#L557 assume !(0 == callOnFloor_~floorID); 2501078#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2495897#L569-2 assume { :end_inline_callOnFloor } true; 2495899#L909 assume { :end_inline_initPersonOnFloor } true; 2496677#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2494594#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2494595#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2495112#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2495113#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2497625#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2496245#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 2496246#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2498123#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2502366#L494 assume !(0 == isFloorCalling_~floorID); 2502365#L498 assume !(1 == isFloorCalling_~floorID); 2502364#L502 assume !(2 == isFloorCalling_~floorID); 2502363#L506 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2502361#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2502360#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2502359#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2502355#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2502354#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2502352#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2502351#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2502349#L2596 assume !(0 != timeShift_~tmp___9~2); 2502348#L2687 assume !(1 == ~doorState~0); 2502347#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2502345#L2036 assume !(1 == stopRequestedInDirection_~dir); 2502342#L2205 assume !(0 == ~currentFloorID~0); 2502338#L2211 assume ~currentFloorID~0 > 0; 2502333#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2502318#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2502305#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2502289#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2502018#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2501930#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2501923#L2412 assume !(1 == ~currentHeading~0); 2501915#L2422 assume !(0 == ~currentFloorID~0); 2501908#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2501901#L2428-1 assume { :end_inline_continueInDirection } true; 2501893#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2501886#L3207 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2501880#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 2501878#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 2501866#L3219 assume !(1 == ~expectedDirection~0); 2501861#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2501858#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2501854#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2501851#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2501848#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2501841#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2501837#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2501830#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2501825#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2501821#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2501817#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2501815#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2501814#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2501813#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2501812#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2501811#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2501809#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2501808#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2501806#L2596-2 assume !(0 != timeShift_~tmp___9~2); 2501805#L2687-3 assume !(1 == ~doorState~0); 2501804#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2501802#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 2501803#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2501800#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2514278#L2695-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2514145#L2467-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~21 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2514261#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2514243#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 2514163#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2514149#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2514139#L2704-3 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2514132#L2412-5 assume !(1 == ~currentHeading~0); 2514124#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2514115#L2422-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2514116#L2428-11 assume { :end_inline_continueInDirection } true; 2514937#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2514927#L3207-1 assume !(-1 == ~expectedDirection~0); 2514873#L3219-1 assume !(1 == ~expectedDirection~0); 2514869#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2514868#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2514867#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2514866#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2514862#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2503018#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2514854#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2514849#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2514838#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2514817#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2510105#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2510106#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2510102#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2510098#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2510100#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2510103#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2510101#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2510078#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2510079#L2596-4 assume !(0 != timeShift_~tmp___9~2); 2515704#L2687-6 assume !(1 == ~doorState~0); 2515703#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2515701#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 2515702#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2515667#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2515754#L2695-4 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2515331#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2515737#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2515723#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 2515358#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2515339#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2515324#L2704-6 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2515309#L2412-8 assume !(1 == ~currentHeading~0); 2515301#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2515290#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2515286#L2428-17 assume { :end_inline_continueInDirection } true; 2515284#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2515280#L3207-2 assume !(-1 == ~expectedDirection~0); 2515277#L3219-2 assume !(1 == ~expectedDirection~0); 2515261#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2515260#L2719-2 assume { :end_inline_timeShift } true; 2515259#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2515256#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2515252#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2515250#L765-1 assume 0 == initPersonOnFloor_~floor; 2515244#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2515184#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2515181#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2515182#L569-5 assume { :end_inline_callOnFloor } true; 2575189#L909-1 assume { :end_inline_initPersonOnFloor } true; 2575179#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2575170#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2575112#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2575109#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 2575085#L3077-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2575086#L1849-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2575679#L1870-33 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2575408#L3081-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 2565099#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2565098#L494-63 assume !(0 == isFloorCalling_~floorID); 2554155#L498-63 assume !(1 == isFloorCalling_~floorID); 2565097#L502-63 assume !(2 == isFloorCalling_~floorID); 2565096#L506-63 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2565094#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2565093#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2564381#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2564038#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2564035#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2564032#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2564030#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2564027#L2596-6 assume !(0 != timeShift_~tmp___9~2); 2564025#L2687-9 assume !(1 == ~doorState~0); 2564022#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2564019#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 2564020#L2205-6 assume !(0 == ~currentFloorID~0); 2568040#L2211-6 assume !(~currentFloorID~0 > 0); 2568038#L2226-6 assume ~currentFloorID~0 > 0; 2568039#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2712348#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2712189#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2712187#L2695-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2712186#L2412-9 assume !(1 == ~currentHeading~0); 2496730#L2422-27 assume !(0 == ~currentFloorID~0); 2499798#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2574592#L2428-19 assume { :end_inline_continueInDirection } true; 2576552#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2576550#L3207-3 assume !(-1 == ~expectedDirection~0); 2576549#L3219-3 assume !(1 == ~expectedDirection~0); 2576543#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2576138#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 2576134#L1268-3 [2018-11-18 12:54:34,806 INFO L796 eck$LassoCheckResult]: Loop: 2576134#L1268-3 assume true; 2576132#L1268-1 assume !false; 2576112#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2576100#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 2576017#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 2576004#L1276 assume 1 != cleanup_~tmp___0~0; 2575995#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2562821#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2562822#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 2560807#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 2560806#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 2560805#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 2560804#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2560798#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2560796#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2550090#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2550087#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2550084#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2550081#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2550078#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2550075#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2550073#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2550069#L494-89 assume !(0 == isFloorCalling_~floorID); 2550070#L498-89 assume !(1 == isFloorCalling_~floorID); 2579696#L502-89 assume !(2 == isFloorCalling_~floorID); 2579695#L506-89 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2579693#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2579692#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2579691#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2579688#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2579686#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2579684#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2579678#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2579675#L2596-8 assume !(0 != timeShift_~tmp___9~2); 2579676#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2590121#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2502980#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 2502981#L2205-8 assume !(0 == ~currentFloorID~0); 2590146#L2211-8 assume !(~currentFloorID~0 > 0); 2590144#L2226-8 assume ~currentFloorID~0 > 0; 2590145#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2714306#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2713215#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2714299#L2695-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2711755#L2412-12 assume !(1 == ~currentHeading~0); 2562831#L2422-36 assume !(0 == ~currentFloorID~0); 2562828#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2562824#L2428-25 assume { :end_inline_continueInDirection } true; 2576159#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2576155#L3207-4 assume !(-1 == ~expectedDirection~0); 2576153#L3219-4 assume !(1 == ~expectedDirection~0); 2576142#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2576139#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 2576134#L1268-3 [2018-11-18 12:54:34,812 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:34,813 INFO L82 PathProgramCache]: Analyzing trace with hash 529781574, now seen corresponding path program 1 times [2018-11-18 12:54:34,813 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:34,813 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:34,813 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:34,813 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:34,813 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:34,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:35,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:35,529 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:35,529 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:54:35,529 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:54:35,529 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:35,529 INFO L82 PathProgramCache]: Analyzing trace with hash -1405153345, now seen corresponding path program 1 times [2018-11-18 12:54:35,530 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:35,530 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:35,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:35,530 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:35,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:35,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:35,567 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:35,567 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:35,567 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 12:54:35,568 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:54:35,568 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 12:54:35,568 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 12:54:35,568 INFO L87 Difference]: Start difference. First operand 222565 states and 407551 transitions. cyclomatic complexity: 184987 Second operand 7 states. [2018-11-18 12:54:44,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:54:44,565 INFO L93 Difference]: Finished difference Result 383665 states and 696197 transitions. [2018-11-18 12:54:44,566 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-18 12:54:44,566 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 383665 states and 696197 transitions. [2018-11-18 12:54:45,587 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 97670 [2018-11-18 12:54:46,354 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 383665 states to 383665 states and 696197 transitions. [2018-11-18 12:54:46,354 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 383665 [2018-11-18 12:54:46,556 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 383665 [2018-11-18 12:54:46,556 INFO L73 IsDeterministic]: Start isDeterministic. Operand 383665 states and 696197 transitions. [2018-11-18 12:54:46,710 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:54:46,710 INFO L705 BuchiCegarLoop]: Abstraction has 383665 states and 696197 transitions. [2018-11-18 12:54:46,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 383665 states and 696197 transitions. [2018-11-18 12:54:49,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 383665 to 278115. [2018-11-18 12:54:49,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 278115 states. [2018-11-18 12:54:49,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278115 states to 278115 states and 509771 transitions. [2018-11-18 12:54:49,458 INFO L728 BuchiCegarLoop]: Abstraction has 278115 states and 509771 transitions. [2018-11-18 12:54:49,458 INFO L608 BuchiCegarLoop]: Abstraction has 278115 states and 509771 transitions. [2018-11-18 12:54:49,458 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-11-18 12:54:49,458 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 278115 states and 509771 transitions. [2018-11-18 12:54:49,984 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 71880 [2018-11-18 12:54:49,984 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:54:49,984 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:54:49,986 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:49,986 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:54:49,986 INFO L794 eck$LassoCheckResult]: Stem: 3102563#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3102564#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 3102164#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3102165#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 3101958#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 3101959#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 3102339#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3106092#L487 assume { :end_inline_initFloors } true; 3102055#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 3102056#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 3102432#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3102193#L765 assume 0 == initPersonOnFloor_~floor; 3101255#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3100864#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3105490#L557 assume !(0 == callOnFloor_~floorID); 3107265#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3102171#L569-2 assume { :end_inline_callOnFloor } true; 3108351#L909 assume { :end_inline_initPersonOnFloor } true; 3108350#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3108349#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3108348#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3108347#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3108346#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3108345#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3108344#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 3108343#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3104362#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3108564#L494 assume !(0 == isFloorCalling_~floorID); 3108563#L498 assume !(1 == isFloorCalling_~floorID); 3108562#L502 assume !(2 == isFloorCalling_~floorID); 3108561#L506 assume !(3 == isFloorCalling_~floorID); 3108560#L510 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3108559#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3108558#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3108557#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 3108553#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3108552#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3108550#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3108549#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3108548#L2596 assume !(0 != timeShift_~tmp___9~2); 3108547#L2687 assume !(1 == ~doorState~0); 3108545#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3108540#L2036 assume !(1 == stopRequestedInDirection_~dir); 3108536#L2205 assume !(0 == ~currentFloorID~0); 3108528#L2211 assume ~currentFloorID~0 > 0; 3108519#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3108508#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3108496#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 3108479#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3108219#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3108119#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3108112#L2412 assume !(1 == ~currentHeading~0); 3108103#L2422 assume !(0 == ~currentFloorID~0); 3108099#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3108094#L2428-1 assume { :end_inline_continueInDirection } true; 3108088#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3108084#L3207 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3108082#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 3108080#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 3108074#L3219 assume !(1 == ~expectedDirection~0); 3108071#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3108070#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3108067#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3108066#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3108065#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3108060#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3108059#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3108052#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3108051#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3108049#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3108045#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3108043#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3108042#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3108041#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3108040#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3108039#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3108037#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3108036#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3108034#L2596-2 assume !(0 != timeShift_~tmp___9~2); 3108033#L2687-3 assume !(1 == ~doorState~0); 3108032#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3108030#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 3108031#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3108028#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3140245#L2695-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3137874#L2467-2 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~21 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3140243#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3140241#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 3137909#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3137898#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3137896#L2704-3 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3137897#L2412-5 assume !(1 == ~currentHeading~0); 3140108#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3140106#L2422-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3140107#L2428-11 assume { :end_inline_continueInDirection } true; 3140250#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3140248#L3207-1 assume !(-1 == ~expectedDirection~0); 3140247#L3219-1 assume !(1 == ~expectedDirection~0); 3140226#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3140224#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3140223#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3140043#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3137771#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3137767#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3137763#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3137759#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3137755#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3137751#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3137748#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3137725#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3137722#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3137711#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3137712#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3137717#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3137713#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3137714#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3139040#L2596-4 assume !(0 != timeShift_~tmp___9~2); 3139035#L2687-6 assume !(1 == ~doorState~0); 3139033#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3139031#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 3139032#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3137681#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3168103#L2695-4 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3137659#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3168102#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3168099#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 3168038#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3168027#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3137650#L2704-6 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3137651#L2412-8 assume !(1 == ~currentHeading~0); 3139349#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3139345#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3137630#L2428-17 assume { :end_inline_continueInDirection } true; 3137629#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3137626#L3207-2 assume !(-1 == ~expectedDirection~0); 3137624#L3219-2 assume !(1 == ~expectedDirection~0); 3137615#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3137614#L2719-2 assume { :end_inline_timeShift } true; 3137613#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 3137610#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 3137606#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3137604#L765-1 assume 0 == initPersonOnFloor_~floor; 3137601#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3137534#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3137533#L557-2 assume !(0 == callOnFloor_~floorID); 3137529#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3137528#L569-5 assume { :end_inline_callOnFloor } true; 3137527#L909-1 assume { :end_inline_initPersonOnFloor } true; 3137526#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3137525#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3137524#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3137523#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3137226#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3137224#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3137222#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3137220#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3137218#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3137213#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3137211#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3137208#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3137204#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3137205#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3137209#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3137206#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3137207#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3142845#L2596-6 assume !(0 != timeShift_~tmp___9~2); 3142843#L2687-9 assume !(1 == ~doorState~0); 3142840#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3142837#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 3142838#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3142657#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3152963#L2695-6 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3142557#L2467-6 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3152960#L2472-6 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3152958#L2036-7 assume !(1 == stopRequestedInDirection_~dir); 3152573#L2205-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3152567#L2358-7 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3142045#L2704-9 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3142030#L2412-11 assume !(1 == ~currentHeading~0); 3142028#L2422-33 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3142024#L2422-35 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3111494#L2428-23 assume { :end_inline_continueInDirection } true; 3111492#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3111488#L3207-3 assume !(-1 == ~expectedDirection~0); 3111486#L3219-3 assume !(1 == ~expectedDirection~0); 3111459#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3111454#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 3111448#L1268-3 [2018-11-18 12:54:50,000 INFO L796 eck$LassoCheckResult]: Loop: 3111448#L1268-3 assume true; 3111443#L1268-1 assume !false; 3111438#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3111431#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 3111383#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 3111381#L1276 assume 1 != cleanup_~tmp___0~0; 3111379#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3111378#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3111377#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 3111375#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 3111372#L1944 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3111369#L494-85 assume !(0 == isFloorCalling_~floorID); 3111362#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3111358#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3111353#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 3111345#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 3111343#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 3111342#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3111323#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3111316#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3111305#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3111297#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3111292#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3111275#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3111266#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3111257#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3111259#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3115871#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3115870#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3115865#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3115866#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3115869#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3115867#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3115868#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3115856#L2596-8 assume !(0 != timeShift_~tmp___9~2); 3111238#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 3111237#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3111235#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 3111236#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3111233#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3142434#L2695-8 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3142432#L2467-8 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~21 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3142430#L2472-8 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3142428#L2036-9 assume !(1 == stopRequestedInDirection_~dir); 3142390#L2205-9 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3142323#L2358-9 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3111580#L2704-12 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3111581#L2412-14 assume !(1 == ~currentHeading~0); 3136975#L2422-42 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3111672#L2422-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3111497#L2428-29 assume { :end_inline_continueInDirection } true; 3111493#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3111490#L3207-4 assume !(-1 == ~expectedDirection~0); 3111487#L3219-4 assume !(1 == ~expectedDirection~0); 3111460#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3111455#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 3111448#L1268-3 [2018-11-18 12:54:50,011 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:50,011 INFO L82 PathProgramCache]: Analyzing trace with hash 1852981445, now seen corresponding path program 1 times [2018-11-18 12:54:50,011 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:50,012 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:50,012 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:50,012 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:50,012 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:50,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:50,743 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:50,743 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:50,743 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:54:50,744 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:54:50,744 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:54:50,744 INFO L82 PathProgramCache]: Analyzing trace with hash 1563672265, now seen corresponding path program 1 times [2018-11-18 12:54:50,744 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:54:50,744 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:54:50,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:50,745 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:54:50,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:54:50,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:54:50,760 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:54:50,761 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:54:50,761 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:54:50,761 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 12:54:50,761 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 12:54:50,761 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 12:54:50,761 INFO L87 Difference]: Start difference. First operand 278115 states and 509771 transitions. cyclomatic complexity: 231657 Second operand 4 states. [2018-11-18 12:54:53,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:54:53,986 INFO L93 Difference]: Finished difference Result 1058031 states and 1949341 transitions. [2018-11-18 12:54:53,986 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:54:53,987 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1058031 states and 1949341 transitions. [2018-11-18 12:55:04,138 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 278999 [2018-11-18 12:55:06,278 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1058031 states to 1058031 states and 1949341 transitions. [2018-11-18 12:55:06,278 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1058031 [2018-11-18 12:55:07,213 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1058031 [2018-11-18 12:55:07,213 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1058031 states and 1949341 transitions. [2018-11-18 12:55:07,470 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:55:07,470 INFO L705 BuchiCegarLoop]: Abstraction has 1058031 states and 1949341 transitions. [2018-11-18 12:55:07,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1058031 states and 1949341 transitions. [2018-11-18 12:55:11,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1058031 to 278297. [2018-11-18 12:55:11,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 278297 states. [2018-11-18 12:55:11,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278297 states to 278297 states and 509953 transitions. [2018-11-18 12:55:11,763 INFO L728 BuchiCegarLoop]: Abstraction has 278297 states and 509953 transitions. [2018-11-18 12:55:11,763 INFO L608 BuchiCegarLoop]: Abstraction has 278297 states and 509953 transitions. [2018-11-18 12:55:11,763 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-11-18 12:55:11,764 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 278297 states and 509953 transitions. [2018-11-18 12:55:12,257 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 71924 [2018-11-18 12:55:12,257 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 12:55:12,257 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 12:55:12,258 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:55:12,258 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:55:12,259 INFO L794 eck$LassoCheckResult]: Stem: 4438724#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4438725#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11;assume { :begin_inline_select_helpers } true; 4438325#L1098 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4438326#L1091 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 4438116#L1106 main_#t~ret49 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 4438117#L1462 assume 0 != main_~tmp~11;assume { :begin_inline_setup } true; 4438502#L1438 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4442326#L487 assume { :end_inline_initFloors } true; 4438213#L1628 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 4438214#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4438589#L3307 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4438354#L765 assume 0 == initPersonOnFloor_~floor; 4437416#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4437022#L873-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4441701#L557 assume !(0 == callOnFloor_~floorID); 4443609#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4438332#L569-2 assume { :end_inline_callOnFloor } true; 4444575#L909 assume { :end_inline_initPersonOnFloor } true; 4444574#L1183 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4444573#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4444572#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4444571#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4444570#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4444569#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4444568#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 4444567#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4440555#L3182 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4444818#L494 assume !(0 == isFloorCalling_~floorID); 4444817#L498 assume !(1 == isFloorCalling_~floorID); 4444816#L502 assume !(2 == isFloorCalling_~floorID); 4444815#L506 assume !(3 == isFloorCalling_~floorID); 4444814#L510 assume 4 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_4~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4444813#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4444812#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4444811#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 4444807#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4444806#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4444804#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4444803#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4444802#L2596 assume !(0 != timeShift_~tmp___9~2); 4444801#L2687 assume !(1 == ~doorState~0); 4444800#L2687-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4444796#L2036 assume !(1 == stopRequestedInDirection_~dir); 4444791#L2205 assume !(0 == ~currentFloorID~0); 4444776#L2211 assume ~currentFloorID~0 > 0; 4444757#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4444756#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4444738#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 4444715#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4444697#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4444695#L2695 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4444694#L2412 assume !(1 == ~currentHeading~0); 4444693#L2422 assume !(0 == ~currentFloorID~0); 4444692#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4444691#L2428-1 assume { :end_inline_continueInDirection } true; 4444687#L2704-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4444418#L3207 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4444416#L1884-1 __utac_acc__Specification3_spec__2_#t~ret161 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret161;havoc __utac_acc__Specification3_spec__2_#t~ret161; 4444414#L3211 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 4444409#L3219 assume !(1 == ~expectedDirection~0); 4444407#L3220 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4444406#L2719 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4444405#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4444404#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4444403#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4444401#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4444399#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4444397#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4444395#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4444393#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4444392#L3182-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4444390#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4444389#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4444388#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4444386#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4444384#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4444380#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4444375#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4444372#L2596-2 assume !(0 != timeShift_~tmp___9~2); 4444371#L2687-3 assume !(1 == ~doorState~0); 4444370#L2687-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4444368#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 4444369#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4444366#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4444956#L2695-2 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4444954#L2467-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4444952#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4444953#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 4439929#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4439930#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4446342#L2704-3 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4446341#L2412-5 assume !(1 == ~currentHeading~0); 4446340#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4446338#L2422-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4446339#L2428-11 assume { :end_inline_continueInDirection } true; 4446785#L2704-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4446779#L3207-1 assume !(-1 == ~expectedDirection~0); 4446775#L3219-1 assume !(1 == ~expectedDirection~0); 4446760#L3220-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4446757#L2719-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4446754#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4446751#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4446748#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4446744#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4446733#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4446727#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4446711#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4446702#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4446704#L3182-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4514111#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4446692#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4446691#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4446688#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4446682#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4446677#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4446671#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4446667#L2596-4 assume !(0 != timeShift_~tmp___9~2); 4446664#L2687-6 assume !(1 == ~doorState~0); 4446665#L2687-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4464809#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 4464810#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4464748#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4474312#L2695-4 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4464725#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4465110#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4465111#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 4439894#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4439895#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4464730#L2704-6 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4464731#L2412-8 assume !(1 == ~currentHeading~0); 4464912#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4464145#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4464132#L2428-17 assume { :end_inline_continueInDirection } true; 4464131#L2704-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4464128#L3207-2 assume !(-1 == ~expectedDirection~0); 4464126#L3219-2 assume !(1 == ~expectedDirection~0); 4464122#L3220-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4464121#L2719-2 assume { :end_inline_timeShift } true; 4464120#L1251 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 4464117#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4464113#L3307-1 bobCall_#t~ret37 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4464111#L765-1 assume 0 == initPersonOnFloor_~floor; 4464088#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4464058#L873-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4464055#L557-2 assume !(0 == callOnFloor_~floorID); 4464045#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4464044#L569-5 assume { :end_inline_callOnFloor } true; 4464043#L909-1 assume { :end_inline_initPersonOnFloor } true; 4464042#L1183-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4463140#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4463122#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4462955#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4462956#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4486942#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4486940#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4486938#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4486936#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4486933#L3182-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4486922#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4457833#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4457831#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4457807#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4457786#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4457687#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4457674#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4457660#L2596-6 assume !(0 != timeShift_~tmp___9~2); 4457650#L2687-9 assume !(1 == ~doorState~0); 4457370#L2687-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4457368#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 4457369#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4457195#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4457578#L2695-6 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4457180#L2467-6 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4457559#L2472-6 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4457557#L2036-7 assume !(1 == stopRequestedInDirection_~dir); 4457542#L2205-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4457479#L2358-7 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4457477#L2704-9 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4457375#L2412-11 assume !(1 == ~currentHeading~0); 4457373#L2422-33 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4457177#L2422-35 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4457164#L2428-23 assume { :end_inline_continueInDirection } true; 4457156#L2704-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4457126#L3207-3 assume !(-1 == ~expectedDirection~0); 4457119#L3219-3 assume !(1 == ~expectedDirection~0); 4456650#L3220-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4456572#L2719-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 4456571#L1268-3 [2018-11-18 12:55:12,268 INFO L796 eck$LassoCheckResult]: Loop: 4456571#L1268-3 assume true; 4456570#L1268-1 assume !false; 4456568#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4456566#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 4456562#L1659 cleanup_#t~ret43 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 4456561#L1276 assume 1 != cleanup_~tmp___0~0; 4456560#L1276-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4456559#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4456557#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 4456555#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 4456553#L1944 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4456551#L494-85 assume !(0 == isFloorCalling_~floorID); 4456548#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4456545#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 4456527#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 4456471#L2004 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 4456472#L2017 cleanup_#t~ret44 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 4456463#L1288 assume !(0 != cleanup_~tmp~9);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4456464#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4456436#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4456437#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4456425#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4456423#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4456421#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4456419#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4456410#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4456411#L3182-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4481045#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4451452#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4451446#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4451448#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4457162#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4457153#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4451439#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4451440#L2596-8 assume !(0 != timeShift_~tmp___9~2); 4451434#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 4451435#L2687-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4451388#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 4451389#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4451349#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4456929#L2695-8 assume !(0 != timeShift_~tmp___8~2);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4451336#L2467-8 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4451334#L2472-8 timeShift_#t~ret99 := getReverseHeading_#res;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4451335#L2036-9 assume !(1 == stopRequestedInDirection_~dir); 4439642#L2205-9 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4439643#L2358-9 timeShift_#t~ret100 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4456942#L2704-12 assume !(0 != timeShift_~tmp___7~2);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4456783#L2412-14 assume !(1 == ~currentHeading~0); 4456781#L2422-42 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4456675#L2422-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4456662#L2428-29 assume { :end_inline_continueInDirection } true; 4456653#L2704-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4456618#L3207-4 assume !(-1 == ~expectedDirection~0); 4456610#L3219-4 assume !(1 == ~expectedDirection~0); 4456575#L3220-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4456573#L2719-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 4456571#L1268-3 [2018-11-18 12:55:12,276 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:55:12,276 INFO L82 PathProgramCache]: Analyzing trace with hash -13727229, now seen corresponding path program 1 times [2018-11-18 12:55:12,276 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:55:12,276 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:55:12,277 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:55:12,277 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:55:12,277 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:55:12,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:55:13,001 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:55:13,002 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:55:13,002 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:55:13,002 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 12:55:13,002 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:55:13,002 INFO L82 PathProgramCache]: Analyzing trace with hash 283808587, now seen corresponding path program 1 times [2018-11-18 12:55:13,003 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:55:13,003 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:55:13,003 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:55:13,003 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:55:13,003 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:55:13,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 12:55:13,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 12:55:15,943 WARN L180 SmtUtils]: Spent 2.89 s on a formula simplification. DAG size of input: 207 DAG size of output: 168 [2018-11-18 12:55:16,064 WARN L180 SmtUtils]: Spent 113.00 ms on a formula simplification that was a NOOP. DAG size: 134 [2018-11-18 12:55:16,071 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 12:55:16,072 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 12:55:16,072 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 12:55:16,072 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 12:55:16,072 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 12:55:16,072 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,072 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 12:55:16,072 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 12:55:16,072 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product25_true-unreach-call_true-termination.cil.c_Iteration17_Loop [2018-11-18 12:55:16,072 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 12:55:16,072 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 12:55:16,094 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,121 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,128 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,134 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,141 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,142 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,147 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,177 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,185 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,250 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,277 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,278 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,318 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,319 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,324 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,325 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,331 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,332 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,344 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,344 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,346 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,357 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:16,743 WARN L180 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 34 [2018-11-18 12:55:16,796 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 12:55:16,797 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,809 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:16,810 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:16,816 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:16,817 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,833 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:16,834 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:16,846 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:16,846 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~17=0, ULTIMATE.start_cleanup_~tmp~9=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~17=0, ULTIMATE.start_cleanup_~tmp~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,881 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:16,881 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:16,890 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:16,890 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret151=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret151=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,918 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:16,918 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:16,920 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:16,921 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret159=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret159=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,949 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:16,949 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:16,955 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:16,955 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~13=0, ULTIMATE.start_buttonForFloorIsPressed_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~21=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~13=0, ULTIMATE.start_buttonForFloorIsPressed_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,974 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:16,974 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:16,976 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:16,976 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret100=0} Honda state: {ULTIMATE.start_timeShift_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:16,999 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:16,999 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,005 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,005 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,035 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,036 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,049 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,049 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~6=0, ULTIMATE.start_isFloorCalling_~retValue_acc~3=0, ULTIMATE.start_isFloorCalling_#res=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~6=0, ULTIMATE.start_isFloorCalling_~retValue_acc~3=0, ULTIMATE.start_isFloorCalling_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,070 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,070 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,072 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,072 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret99=0} Honda state: {ULTIMATE.start_timeShift_#t~ret99=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,089 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,090 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,093 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,093 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~8=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,114 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,114 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,116 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,116 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret91=0} Honda state: {ULTIMATE.start_timeShift_#t~ret91=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,133 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,134 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,139 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,139 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,157 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,157 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,160 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,160 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret44=0} Honda state: {ULTIMATE.start_cleanup_#t~ret44=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,177 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,178 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,180 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,180 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=0} Honda state: {~expectedDirection~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,199 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,199 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,201 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,201 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,221 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,221 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,224 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,224 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~retValue_acc~16=1, ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_isIdle_~tmp~18=1} Honda state: {ULTIMATE.start_anyStopRequested_~retValue_acc~16=1, ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_isIdle_~tmp~18=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,241 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,241 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,243 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,244 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,260 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,260 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,263 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,263 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=0, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~18=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=0, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~18=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,281 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,281 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,283 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,283 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,306 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,306 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,307 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,308 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,324 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,324 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,329 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,329 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret101=0} Honda state: {ULTIMATE.start_timeShift_#t~ret101=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,345 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,345 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,348 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,348 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___4~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___4~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,365 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,365 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,367 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,367 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,384 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,384 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,386 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,386 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~4=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,403 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,403 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,405 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,405 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,430 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,430 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,437 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,437 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret59=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret59=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,467 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,467 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,470 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,470 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret98=0} Honda state: {ULTIMATE.start_timeShift_#t~ret98=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,488 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,489 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,493 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,493 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0, ULTIMATE.start_buttonForFloorIsPressed_#in~floorID=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0, ULTIMATE.start_buttonForFloorIsPressed_#in~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,509 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,509 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,511 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,511 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret70=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,532 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,532 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,541 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 12:55:17,541 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret153=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret153=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,557 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 12:55:17,557 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_7b2fdcb6-eae4-4d54-91d7-11c2a3f0c31f/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,577 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 12:55:17,577 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 12:55:17,949 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 12:55:17,950 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 12:55:17,950 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 12:55:17,950 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 12:55:17,950 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 12:55:17,950 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 12:55:17,950 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 12:55:17,950 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 12:55:17,950 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 12:55:17,950 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product25_true-unreach-call_true-termination.cil.c_Iteration17_Loop [2018-11-18 12:55:17,951 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 12:55:17,951 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 12:55:17,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,986 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,998 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:17,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,007 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,015 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,049 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,050 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,053 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,054 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,106 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,121 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,122 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,123 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,210 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,231 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,233 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,247 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,270 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,273 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,290 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 12:55:18,729 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 12:55:18,734 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 12:55:18,735 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,736 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,737 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,737 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,737 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,737 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,738 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,739 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,740 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,740 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,740 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,740 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,740 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,741 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,741 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,741 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,741 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,742 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,743 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,743 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,743 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,743 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,743 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,743 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,744 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,744 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,745 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,745 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,745 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,745 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,745 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,746 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,746 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,746 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,746 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,747 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,747 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,747 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,747 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,747 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,747 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,748 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,753 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,753 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,754 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,754 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,755 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,755 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,755 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,755 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,755 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,755 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,755 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,756 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,756 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,756 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,756 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,757 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,757 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,757 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,765 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,765 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,765 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,765 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,766 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,766 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,766 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,766 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,766 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,767 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,767 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,768 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,768 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,768 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,768 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,769 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,769 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,769 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,769 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,769 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,770 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,770 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,770 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,770 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,770 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,770 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,770 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,771 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,771 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,771 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,771 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,772 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,772 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,772 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,772 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,772 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,772 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,772 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,777 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,778 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,778 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,778 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,778 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,778 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,778 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,779 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,779 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,780 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,780 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,780 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,780 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,780 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,780 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,780 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,781 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,781 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,781 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,781 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,781 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,781 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,782 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,782 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,782 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,782 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,782 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,782 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,782 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,783 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,783 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,783 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,783 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,783 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,783 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,783 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,785 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,785 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,785 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,785 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,785 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,785 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,786 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,786 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,786 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,787 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,787 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,787 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,787 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,787 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,787 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,788 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,788 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,788 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,788 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,789 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,789 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,789 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,789 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,789 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,789 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,790 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,790 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,790 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,791 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,791 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,791 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,791 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,791 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,791 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,792 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,792 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,792 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,792 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,793 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,793 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,793 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,793 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,793 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,793 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,794 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,794 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,794 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,795 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,795 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,795 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,795 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,795 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,795 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,796 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,796 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,796 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,797 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,797 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,797 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,797 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,797 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,797 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,797 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,798 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,798 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,799 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,799 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,799 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,799 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,799 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,799 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,799 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,800 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,800 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,800 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,800 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,801 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,801 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,801 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,801 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,801 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,802 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,802 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,802 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,802 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,802 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,803 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,803 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,803 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,803 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,803 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,804 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,804 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,804 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,804 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,804 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,804 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,805 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,805 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,805 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,806 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,806 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,806 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,806 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,806 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,806 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,807 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,807 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,807 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,808 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,808 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,808 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,808 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,808 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,808 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,809 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,809 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,809 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,809 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,810 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,810 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,810 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,810 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,810 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,810 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,810 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,811 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,811 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,811 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,812 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,812 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,812 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,812 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,812 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,812 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,813 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 12:55:18,813 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 12:55:18,813 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 12:55:18,813 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 12:55:18,813 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 12:55:18,814 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 12:55:18,814 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 12:55:18,814 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 12:55:18,814 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 12:55:18,816 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 12:55:18,820 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 12:55:18,820 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 12:55:18,821 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 12:55:18,822 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 12:55:18,822 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 12:55:18,822 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2018-11-18 12:55:18,823 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 12:55:18,868 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:55:19,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:55:19,064 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:55:19,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:55:19,140 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:55:19,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:55:19,386 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 12:55:19,387 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 278297 states and 509953 transitions. cyclomatic complexity: 231657 Second operand 5 states. [2018-11-18 12:55:20,882 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 278297 states and 509953 transitions. cyclomatic complexity: 231657. Second operand 5 states. Result 350221 states and 641163 transitions. Complement of second has 8 states. [2018-11-18 12:55:20,882 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 12:55:20,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 12:55:20,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11195 transitions. [2018-11-18 12:55:20,895 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11195 transitions. Stem has 187 letters. Loop has 56 letters. [2018-11-18 12:55:20,897 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 12:55:20,897 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11195 transitions. Stem has 243 letters. Loop has 56 letters. [2018-11-18 12:55:20,899 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 12:55:20,899 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11195 transitions. Stem has 187 letters. Loop has 112 letters. [2018-11-18 12:55:20,900 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 12:55:20,901 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 350221 states and 641163 transitions. [2018-11-18 12:55:22,167 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 12:55:22,167 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 350221 states to 0 states and 0 transitions. [2018-11-18 12:55:22,167 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 12:55:22,167 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 12:55:22,167 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 12:55:22,167 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:55:22,167 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 12:55:22,167 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 12:55:22,167 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 12:55:22,167 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 12:55:22,168 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-11-18 12:55:22,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:55:22,168 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 12:55:22,168 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 12:55:22,168 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 12:55:22,168 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 12:55:22,168 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 12:55:22,168 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L442 BuchiCegarLoop]: ======== Iteration 18============ [2018-11-18 12:55:22,168 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 12:55:22,168 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 12:55:22,168 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 12:55:22,172 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 12:55:22 BoogieIcfgContainer [2018-11-18 12:55:22,172 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 12:55:22,173 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 12:55:22,173 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 12:55:22,173 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 12:55:22,173 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:52:49" (3/4) ... [2018-11-18 12:55:22,175 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 12:55:22,176 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 12:55:22,176 INFO L168 Benchmark]: Toolchain (without parser) took 161284.21 ms. Allocated memory was 1.0 GB in the beginning and 6.2 GB in the end (delta: 5.2 GB). Free memory was 951.1 MB in the beginning and 4.5 GB in the end (delta: -3.6 GB). Peak memory consumption was 1.6 GB. Max. memory is 11.5 GB. [2018-11-18 12:55:22,176 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 12:55:22,177 INFO L168 Benchmark]: CACSL2BoogieTranslator took 616.30 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 195.6 MB). Free memory was 951.1 MB in the beginning and 1.2 GB in the end (delta: -215.4 MB). Peak memory consumption was 51.0 MB. Max. memory is 11.5 GB. [2018-11-18 12:55:22,177 INFO L168 Benchmark]: Boogie Procedure Inliner took 200.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 60.7 MB). Peak memory consumption was 60.7 MB. Max. memory is 11.5 GB. [2018-11-18 12:55:22,177 INFO L168 Benchmark]: Boogie Preprocessor took 232.38 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 57.6 MB). Peak memory consumption was 57.6 MB. Max. memory is 11.5 GB. [2018-11-18 12:55:22,177 INFO L168 Benchmark]: RCFGBuilder took 7279.82 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 437.8 MB). Free memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: -383.0 MB). Peak memory consumption was 446.5 MB. Max. memory is 11.5 GB. [2018-11-18 12:55:22,178 INFO L168 Benchmark]: BuchiAutomizer took 152949.36 ms. Allocated memory was 1.7 GB in the beginning and 6.2 GB in the end (delta: 4.6 GB). Free memory was 1.4 GB in the beginning and 4.5 GB in the end (delta: -3.1 GB). Peak memory consumption was 1.5 GB. Max. memory is 11.5 GB. [2018-11-18 12:55:22,178 INFO L168 Benchmark]: Witness Printer took 3.00 ms. Allocated memory is still 6.2 GB. Free memory is still 4.5 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 12:55:22,180 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 616.30 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 195.6 MB). Free memory was 951.1 MB in the beginning and 1.2 GB in the end (delta: -215.4 MB). Peak memory consumption was 51.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 200.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 60.7 MB). Peak memory consumption was 60.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 232.38 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 57.6 MB). Peak memory consumption was 57.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 7279.82 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 437.8 MB). Free memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: -383.0 MB). Peak memory consumption was 446.5 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 152949.36 ms. Allocated memory was 1.7 GB in the beginning and 6.2 GB in the end (delta: 4.6 GB). Free memory was 1.4 GB in the beginning and 4.5 GB in the end (delta: -3.1 GB). Peak memory consumption was 1.5 GB. Max. memory is 11.5 GB. * Witness Printer took 3.00 ms. Allocated memory is still 6.2 GB. Free memory is still 4.5 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 18 terminating modules (17 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 17 modules have a trivial ranking function, the largest among these consists of 7 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 152.9s and 18 iterations. TraceHistogramMax:1. Analysis of lassos took 19.5s. Construction of modules took 65.9s. Büchi inclusion checks took 17.6s. Highest rank in rank-based complementation 3. Minimization of det autom 18. Minimization of nondet autom 0. Automata minimization 20.2s AutomataMinimizationTime, 16 MinimizatonAttempts, 1381187 StatesRemovedByMinimization, 16 NontrivialMinimizations. Non-live state removal took 22.8s Buchi closure took 1.9s. Biggest automaton had 278297 states and ocurred in iteration 16. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 313112 SDtfs, 762200 SDslu, 529393 SDs, 0 SdLazy, 39177 SolverSat, 4422 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 65.9s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI16 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf348 smp46 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 5ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 30 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.6s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...