./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c169527384ebd2beb44494ef6b1cbc32334198d2b76d2236e6ced79c84ed026c --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-22 02:28:55,024 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 02:28:55,026 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 02:28:55,060 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 02:28:55,061 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 02:28:55,063 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 02:28:55,066 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 02:28:55,069 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 02:28:55,071 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 02:28:55,075 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 02:28:55,076 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 02:28:55,080 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 02:28:55,080 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 02:28:55,082 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 02:28:55,084 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 02:28:55,086 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 02:28:55,087 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 02:28:55,089 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 02:28:55,091 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 02:28:55,096 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 02:28:55,097 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 02:28:55,098 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 02:28:55,100 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 02:28:55,101 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 02:28:55,102 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 02:28:55,108 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 02:28:55,109 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 02:28:55,109 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 02:28:55,110 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 02:28:55,111 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 02:28:55,111 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 02:28:55,112 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 02:28:55,113 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 02:28:55,114 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 02:28:55,115 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 02:28:55,116 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 02:28:55,116 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 02:28:55,117 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 02:28:55,117 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 02:28:55,117 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 02:28:55,118 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 02:28:55,119 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 02:28:55,126 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-22 02:28:55,165 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 02:28:55,165 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 02:28:55,166 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 02:28:55,166 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 02:28:55,167 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 02:28:55,167 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 02:28:55,167 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 02:28:55,168 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-22 02:28:55,168 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-22 02:28:55,169 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-22 02:28:55,169 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-22 02:28:55,169 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-22 02:28:55,169 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-22 02:28:55,169 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 02:28:55,170 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 02:28:55,170 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-22 02:28:55,170 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 02:28:55,170 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 02:28:55,170 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 02:28:55,171 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-22 02:28:55,171 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-22 02:28:55,171 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-22 02:28:55,171 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 02:28:55,172 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 02:28:55,172 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-22 02:28:55,172 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 02:28:55,172 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-22 02:28:55,172 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 02:28:55,173 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 02:28:55,173 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 02:28:55,173 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 02:28:55,175 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-22 02:28:55,175 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c169527384ebd2beb44494ef6b1cbc32334198d2b76d2236e6ced79c84ed026c [2022-07-22 02:28:55,498 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 02:28:55,522 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 02:28:55,525 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 02:28:55,526 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 02:28:55,526 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 02:28:55,528 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c [2022-07-22 02:28:55,586 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/683d82837/ffaec9e06e954b529324d777a5420376/FLAG6bbed87f4 [2022-07-22 02:28:56,151 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 02:28:56,152 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c [2022-07-22 02:28:56,168 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/683d82837/ffaec9e06e954b529324d777a5420376/FLAG6bbed87f4 [2022-07-22 02:28:56,609 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/683d82837/ffaec9e06e954b529324d777a5420376 [2022-07-22 02:28:56,611 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 02:28:56,611 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 02:28:56,612 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 02:28:56,613 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 02:28:56,622 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 02:28:56,622 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 02:28:56" (1/1) ... [2022-07-22 02:28:56,623 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@752072be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:56, skipping insertion in model container [2022-07-22 02:28:56,623 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 02:28:56" (1/1) ... [2022-07-22 02:28:56,629 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 02:28:56,696 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 02:28:56,876 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c[5770,5783] [2022-07-22 02:28:57,085 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 02:28:57,093 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 02:28:57,107 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c[5770,5783] [2022-07-22 02:28:57,207 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 02:28:57,240 INFO L208 MainTranslator]: Completed translation [2022-07-22 02:28:57,241 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57 WrapperNode [2022-07-22 02:28:57,241 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 02:28:57,242 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 02:28:57,243 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 02:28:57,243 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 02:28:57,248 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:57,291 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:57,622 INFO L137 Inliner]: procedures = 88, calls = 338, calls flagged for inlining = 191, calls inlined = 673, statements flattened = 21629 [2022-07-22 02:28:57,623 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 02:28:57,624 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 02:28:57,624 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 02:28:57,624 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 02:28:57,631 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:57,631 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:57,656 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:57,656 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:57,896 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:58,044 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:58,077 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:58,163 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 02:28:58,164 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 02:28:58,164 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 02:28:58,164 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 02:28:58,165 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (1/1) ... [2022-07-22 02:28:58,170 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:28:58,177 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:28:58,192 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:28:58,260 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-22 02:28:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 02:28:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 02:28:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 02:28:58,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 02:28:58,482 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 02:28:58,485 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 02:29:05,309 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 02:29:05,358 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 02:29:05,358 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-22 02:29:05,366 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 02:29:05 BoogieIcfgContainer [2022-07-22 02:29:05,366 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 02:29:05,367 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-22 02:29:05,367 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-22 02:29:05,370 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-22 02:29:05,370 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:29:05,371 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 22.07 02:28:56" (1/3) ... [2022-07-22 02:29:05,371 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@262da2bf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.07 02:29:05, skipping insertion in model container [2022-07-22 02:29:05,372 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:29:05,372 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:57" (2/3) ... [2022-07-22 02:29:05,372 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@262da2bf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.07 02:29:05, skipping insertion in model container [2022-07-22 02:29:05,372 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:29:05,372 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 02:29:05" (3/3) ... [2022-07-22 02:29:05,374 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product17.cil.c [2022-07-22 02:29:05,491 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-22 02:29:05,491 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-22 02:29:05,491 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-22 02:29:05,491 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-22 02:29:05,491 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-22 02:29:05,491 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-22 02:29:05,492 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-22 02:29:05,492 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-22 02:29:05,518 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6203 states, 6202 states have (on average 1.871976781683328) internal successors, (11610), 6202 states have internal predecessors, (11610), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:05,720 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1256 [2022-07-22 02:29:05,720 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:05,720 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:05,737 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:05,737 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:05,737 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-22 02:29:05,749 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6203 states, 6202 states have (on average 1.871976781683328) internal successors, (11610), 6202 states have internal predecessors, (11610), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:05,816 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1256 [2022-07-22 02:29:05,816 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:05,816 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:05,821 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:05,821 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:05,829 INFO L752 eck$LassoCheckResult]: Stem: 4998#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 3015#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 4928#L3336true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3774#L3329true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1069#L3344true main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 1296#L3182true assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1367#L3156true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5113#L448true assume { :end_inline_initFloors } true; 5695#L1442true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 3108#L3239true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4448#L3264true bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3441#L726true assume 0 == initPersonOnFloor_~floor#1; 4917#L727true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4470#L834-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3684#L518true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 866#L530-2true assume { :end_inline_callOnFloor } true; 2565#L870true assume { :end_inline_initPersonOnFloor } true; 2169#L2906true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2214#L1626true __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 3227#L1678true __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 718#L97true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 2646#L159true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 5537#L1643-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1010#L1664-5true __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 1099#L163true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 2130#L203true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 667#L455true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 902#L482true stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 744#L2239true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 4456#L2251true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3192#L2388true assume !(0 != timeShift_~tmp___9~3#1); 3807#L2479true assume !(1 == ~doorState~0); 5168#L2479-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 4451#L1830true assume !(1 == stopRequestedInDirection_~dir#1); 4372#L1999true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1593#L2152true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2413#L2487true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 4671#L2206true assume !(1 == ~currentHeading~0); 962#L2216true assume !(0 == ~currentFloorID~0); 2826#L2216-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1000#L2222-1true assume { :end_inline_continueInDirection } true; 5024#L2496-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 6067#L228true assume !(-1 == ~expectedDirection~0); 1851#L240true assume !(1 == ~expectedDirection~0); 6009#L241true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 183#L2511true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4276#L1626-1true __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1615#L1678-3true __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1523#L97-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 4918#L98-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 5621#L1643-11true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1256#L1664-11true __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 5045#L102-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 3946#L203-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 4787#L455-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 880#L482-21true stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 3145#L2239-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 5327#L2251-1true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 5088#L2388-2true assume !(0 != timeShift_~tmp___9~3#1); 2318#L2479-3true assume !(1 == ~doorState~0); 4877#L2479-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 3661#L1830-2true assume !(1 == stopRequestedInDirection_~dir#1); 5218#L1999-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1021#L2152-2true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 2629#L2487-2true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1954#L2206-3true assume !(1 == ~currentHeading~0); 3613#L2216-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3233#L2216-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2703#L2222-7true assume { :end_inline_continueInDirection } true; 4440#L2496-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 810#L228-1true assume !(-1 == ~expectedDirection~0); 2004#L240-1true assume !(1 == ~expectedDirection~0); 2387#L241-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6139#L2511-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3052#L1626-2true __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 2016#L1678-6true __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 2976#L97-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 4974#L98-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 4859#L1643-22true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1452#L1664-22true __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 3507#L102-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 4003#L203-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 4381#L455-42true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2131#L482-42true stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 3148#L2239-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 3697#L2251-2true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3741#L2388-4true assume !(0 != timeShift_~tmp___9~3#1); 4142#L2479-6true assume !(1 == ~doorState~0); 5120#L2479-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 2107#L1830-4true assume !(1 == stopRequestedInDirection_~dir#1); 3810#L1999-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 2669#L2152-4true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 3485#L2487-4true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1730#L2206-6true assume !(1 == ~currentHeading~0); 6109#L2216-18true assume !(0 == ~currentFloorID~0); 3797#L2216-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4644#L2222-13true assume { :end_inline_continueInDirection } true; 2273#L2496-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 616#L228-2true assume !(-1 == ~expectedDirection~0); 3313#L240-2true assume !(1 == ~expectedDirection~0); 4464#L241-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1661#L2511-2true assume { :end_inline_timeShift } true; 1889#L2973true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1717#L3239-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4736#L3264-1true bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5948#L726-1true assume 0 == initPersonOnFloor_~floor#1; 1616#L727-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4818#L834-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2967#L518-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5182#L530-5true assume { :end_inline_callOnFloor } true; 681#L870-1true assume { :end_inline_initPersonOnFloor } true; 1743#L2906-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2283#L1626-3true __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 6122#L1678-9true __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 4465#L97-3true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 5673#L159-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 969#L1643-38true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 673#L1664-38true __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 872#L163-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 4848#L203-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2219#L455-63true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1424#L482-63true stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 3469#L2239-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 2617#L2251-3true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3912#L2388-6true assume !(0 != timeShift_~tmp___9~3#1); 2039#L2479-9true assume !(1 == ~doorState~0); 5216#L2479-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 5768#L1830-6true assume !(1 == stopRequestedInDirection_~dir#1); 1510#L1999-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5576#L2152-6true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 3008#L2487-6true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1575#L2206-9true assume !(1 == ~currentHeading~0); 3842#L2216-27true assume !(0 == ~currentFloorID~0); 4318#L2216-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4911#L2222-19true assume { :end_inline_continueInDirection } true; 2994#L2496-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 3455#L228-3true assume !(-1 == ~expectedDirection~0); 4826#L240-3true assume !(1 == ~expectedDirection~0); 4676#L241-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1786#L2511-3true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 6162#L2988-2true [2022-07-22 02:29:05,831 INFO L754 eck$LassoCheckResult]: Loop: 6162#L2988-2true assume !false; 5209#L2989true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 978#L2992true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 4861#L1473true cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1873#L2996true assume 1 != cleanup_~tmp___0~10#1; 5741#L2996-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 4147#L455-84true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 5963#L482-84true anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 4506#L1734true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1345#L1798true isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 2688#L1811true cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 2222#L3008true assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3561#L1626-4true __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 5733#L1678-12true __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 2934#L97-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 910#L159-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 4645#L1643-49true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 18#L1664-49true __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 4217#L163-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1887#L203-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 5247#L455-89true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1149#L482-89true stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 5660#L2239-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 2347#L2251-4true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 3408#L2388-8true assume !(0 != timeShift_~tmp___9~3#1); 1911#L2479-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4795#L2479-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 5515#L1830-8true assume !(1 == stopRequestedInDirection_~dir#1); 2160#L1999-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1996#L2152-8true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 765#L2487-8true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1427#L2206-12true assume !(1 == ~currentHeading~0); 6053#L2216-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5441#L2216-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2348#L2222-25true assume { :end_inline_continueInDirection } true; 5497#L2496-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 3100#L228-4true assume !(-1 == ~expectedDirection~0); 4485#L240-4true assume !(1 == ~expectedDirection~0); 1104#L241-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 609#L2511-4true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 6162#L2988-2true [2022-07-22 02:29:05,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:05,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1789015940, now seen corresponding path program 1 times [2022-07-22 02:29:05,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:05,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1067108555] [2022-07-22 02:29:05,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:05,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:05,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:06,105 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:06,105 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:06,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1067108555] [2022-07-22 02:29:06,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1067108555] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:06,108 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:06,108 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:06,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996208157] [2022-07-22 02:29:06,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:06,115 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:06,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:06,116 INFO L85 PathProgramCache]: Analyzing trace with hash -390981259, now seen corresponding path program 1 times [2022-07-22 02:29:06,116 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:06,116 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [216435365] [2022-07-22 02:29:06,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:06,117 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:06,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:06,229 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:06,229 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:06,229 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [216435365] [2022-07-22 02:29:06,229 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [216435365] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:06,230 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:06,230 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 02:29:06,230 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1880421340] [2022-07-22 02:29:06,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:06,231 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:06,232 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:06,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 02:29:06,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-22 02:29:06,293 INFO L87 Difference]: Start difference. First operand has 6203 states, 6202 states have (on average 1.871976781683328) internal successors, (11610), 6202 states have internal predecessors, (11610), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:10,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:10,437 INFO L93 Difference]: Finished difference Result 15604 states and 28904 transitions. [2022-07-22 02:29:10,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-22 02:29:10,442 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15604 states and 28904 transitions. [2022-07-22 02:29:10,564 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3608 [2022-07-22 02:29:10,666 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15604 states to 15516 states and 28805 transitions. [2022-07-22 02:29:10,667 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15516 [2022-07-22 02:29:10,686 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15516 [2022-07-22 02:29:10,686 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15516 states and 28805 transitions. [2022-07-22 02:29:10,717 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:10,718 INFO L369 hiAutomatonCegarLoop]: Abstraction has 15516 states and 28805 transitions. [2022-07-22 02:29:10,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15516 states and 28805 transitions. [2022-07-22 02:29:10,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15516 to 10350. [2022-07-22 02:29:10,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10350 states, 10350 states have (on average 1.8580676328502415) internal successors, (19231), 10349 states have internal predecessors, (19231), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:11,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10350 states to 10350 states and 19231 transitions. [2022-07-22 02:29:11,017 INFO L392 hiAutomatonCegarLoop]: Abstraction has 10350 states and 19231 transitions. [2022-07-22 02:29:11,017 INFO L374 stractBuchiCegarLoop]: Abstraction has 10350 states and 19231 transitions. [2022-07-22 02:29:11,017 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-22 02:29:11,018 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10350 states and 19231 transitions. [2022-07-22 02:29:11,066 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2317 [2022-07-22 02:29:11,067 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:11,067 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:11,070 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:11,070 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:11,071 INFO L752 eck$LassoCheckResult]: Stem: 27960#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 26610#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 26611#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 27277#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 24055#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 24056#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 24444#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 24541#L448 assume { :end_inline_initFloors } true; 27997#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 26706#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 24796#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 27013#L726 assume 0 == initPersonOnFloor_~floor#1; 27014#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22408#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 27205#L518 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 23711#L530-2 assume { :end_inline_callOnFloor } true; 23712#L870 assume { :end_inline_initPersonOnFloor } true; 25656#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 25657#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 25717#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 23458#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 23459#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 26228#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 21943#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 23959#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 23208#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 23354#L455 assume !(0 == isFloorCalling_~floorID#1); 23355#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 23336#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 23505#L2239 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 23506#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 26790#L2388 assume !(0 != timeShift_~tmp___9~3#1); 26791#L2479 assume !(1 == ~doorState~0); 27300#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 27725#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 24197#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 24198#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 23701#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 24890#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 25949#L2206 assume !(1 == ~currentHeading~0); 23889#L2216 assume !(0 == ~currentFloorID~0); 23890#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23944#L2222-1 assume { :end_inline_continueInDirection } true; 23945#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 27968#L228 assume !(-1 == ~expectedDirection~0); 25251#L240 assume !(1 == ~expectedDirection~0); 25252#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22294#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 22295#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 24921#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 24788#L97-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 24789#L98-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 27928#L1643-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 24379#L1664-11 __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 24380#L102-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 23198#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 27417#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 22370#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 23738#L2239-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 24976#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 27991#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 25840#L2479-3 assume !(1 == ~doorState~0); 25841#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 27188#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 27189#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 22349#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 23975#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 25384#L2206-3 assume !(1 == ~currentHeading~0); 25386#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 26833#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26296#L2222-7 assume { :end_inline_continueInDirection } true; 26297#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 23616#L228-1 assume !(-1 == ~expectedDirection~0); 23617#L240-1 assume !(1 == ~expectedDirection~0); 24866#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 25918#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 26648#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 25471#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 25472#L97-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 26575#L98-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 27904#L1643-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 23422#L1664-22 __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 24660#L102-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 25899#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 27455#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 23803#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 25608#L2239-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 23692#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 27217#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 27255#L2479-6 assume !(1 == ~doorState~0); 27546#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 25575#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 25576#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 31908#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 31906#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 31907#L2206-6 assume !(1 == ~currentHeading~0); 32024#L2216-18 assume !(0 == ~currentFloorID~0); 27058#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27293#L2222-13 assume { :end_inline_continueInDirection } true; 23394#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 23246#L228-2 assume !(-1 == ~expectedDirection~0); 23247#L240-2 assume !(1 == ~expectedDirection~0); 26905#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 24991#L2511-2 assume { :end_inline_timeShift } true; 24992#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 25071#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 23923#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 27859#L726-1 assume 0 == initPersonOnFloor_~floor#1; 24922#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22330#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 26565#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 26562#L530-5 assume { :end_inline_callOnFloor } true; 23383#L870-1 assume { :end_inline_initPersonOnFloor } true; 23384#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 25106#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 25795#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 27733#L97-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 22898#L98-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 22899#L1643-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 25423#L1664-33 __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 25373#L102-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 25012#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 27899#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 24428#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 24619#L2239-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 23793#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 26190#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 25499#L2479-9 assume !(1 == ~doorState~0); 25500#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 28037#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 28162#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 22346#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 26603#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 24867#L2206-9 assume !(1 == ~currentHeading~0); 24868#L2216-27 assume !(0 == ~currentFloorID~0); 27336#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27666#L2222-19 assume { :end_inline_continueInDirection } true; 22571#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 26591#L228-3 assume !(-1 == ~expectedDirection~0); 23063#L240-3 assume !(1 == ~expectedDirection~0); 26070#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 25169#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 23233#L2988-2 [2022-07-22 02:29:11,072 INFO L754 eck$LassoCheckResult]: Loop: 23233#L2988-2 assume !false; 28033#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 23915#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 23916#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 25278#L2996 assume 1 != cleanup_~tmp___0~10#1; 25279#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 27549#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 26659#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 27750#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 22147#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 24513#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 25727#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 25728#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 27109#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 26527#L97-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 22656#L98-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 22657#L1643-44 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 24111#L1664-44 __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 25318#L102-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 22025#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 25298#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 24194#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 24195#L2239-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 25875#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 25876#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 25323#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25324#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 27881#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 28110#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 32093#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 32140#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 32141#L2206-12 assume !(1 == ~currentHeading~0); 32182#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 27878#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25877#L2222-25 assume { :end_inline_continueInDirection } true; 25810#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 26695#L228-4 assume !(-1 == ~expectedDirection~0); 25996#L240-4 assume !(1 == ~expectedDirection~0); 24113#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23232#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 23233#L2988-2 [2022-07-22 02:29:11,073 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:11,073 INFO L85 PathProgramCache]: Analyzing trace with hash 1325892877, now seen corresponding path program 1 times [2022-07-22 02:29:11,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:11,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1917693286] [2022-07-22 02:29:11,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:11,074 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:11,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:11,165 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:11,166 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:11,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1917693286] [2022-07-22 02:29:11,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1917693286] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:11,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:11,166 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:11,166 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [12424827] [2022-07-22 02:29:11,166 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:11,167 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:11,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:11,167 INFO L85 PathProgramCache]: Analyzing trace with hash 956523482, now seen corresponding path program 1 times [2022-07-22 02:29:11,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:11,168 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694499345] [2022-07-22 02:29:11,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:11,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:11,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:11,261 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:11,261 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:11,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694499345] [2022-07-22 02:29:11,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694499345] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:11,262 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:11,262 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-22 02:29:11,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1158375576] [2022-07-22 02:29:11,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:11,262 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:11,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:11,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-22 02:29:11,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-07-22 02:29:11,264 INFO L87 Difference]: Start difference. First operand 10350 states and 19231 transitions. cyclomatic complexity: 8882 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:16,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:16,289 INFO L93 Difference]: Finished difference Result 24490 states and 45404 transitions. [2022-07-22 02:29:16,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-07-22 02:29:16,292 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24490 states and 45404 transitions. [2022-07-22 02:29:16,422 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5890 [2022-07-22 02:29:16,531 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24490 states to 24490 states and 45404 transitions. [2022-07-22 02:29:16,532 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24490 [2022-07-22 02:29:16,552 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24490 [2022-07-22 02:29:16,552 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24490 states and 45404 transitions. [2022-07-22 02:29:16,592 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:16,593 INFO L369 hiAutomatonCegarLoop]: Abstraction has 24490 states and 45404 transitions. [2022-07-22 02:29:16,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24490 states and 45404 transitions. [2022-07-22 02:29:16,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24490 to 10322. [2022-07-22 02:29:16,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10322 states, 10322 states have (on average 1.8580701414454563) internal successors, (19179), 10321 states have internal predecessors, (19179), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:16,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10322 states to 10322 states and 19179 transitions. [2022-07-22 02:29:16,895 INFO L392 hiAutomatonCegarLoop]: Abstraction has 10322 states and 19179 transitions. [2022-07-22 02:29:16,896 INFO L374 stractBuchiCegarLoop]: Abstraction has 10322 states and 19179 transitions. [2022-07-22 02:29:16,896 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-22 02:29:16,896 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10322 states and 19179 transitions. [2022-07-22 02:29:16,932 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2310 [2022-07-22 02:29:16,932 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:16,932 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:16,938 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:16,938 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:16,939 INFO L752 eck$LassoCheckResult]: Stem: 62736#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 61463#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 61464#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 62101#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 58955#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 58956#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 59342#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 59436#L448 assume { :end_inline_initFloors } true; 62772#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 61558#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 59690#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 61854#L726 assume 0 == initPersonOnFloor_~floor#1; 61855#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 57321#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 62033#L518 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 58614#L530-2 assume { :end_inline_callOnFloor } true; 58615#L870 assume { :end_inline_initPersonOnFloor } true; 60528#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 60529#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 60589#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 58363#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 58364#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 61092#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 56856#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 58861#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 58114#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 58259#L455 assume !(0 == isFloorCalling_~floorID#1); 58260#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 58241#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 58413#L2239 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 58414#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 61642#L2388 assume !(0 != timeShift_~tmp___9~3#1); 61643#L2479 assume !(1 == ~doorState~0); 62124#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 62519#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 59095#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 59096#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 58604#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 59781#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 60816#L2206 assume !(1 == ~currentHeading~0); 58791#L2216 assume !(0 == ~currentFloorID~0); 58792#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58846#L2222-1 assume { :end_inline_continueInDirection } true; 58847#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 62745#L228 assume !(-1 == ~expectedDirection~0); 60136#L240 assume !(1 == ~expectedDirection~0); 60137#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 57205#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 57206#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 59812#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 59682#L97-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 59683#L98-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 64398#L108-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 64396#L1643-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 64385#L1664-12 __utac_acc__Specification3_spec__1_#t~ret7#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret7#1;havoc __utac_acc__Specification3_spec__1_#t~ret7#1; 64381#L113-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 64370#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 64369#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 64363#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 64360#L2239-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 64359#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 64357#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 64356#L2479-3 assume !(1 == ~doorState~0); 64355#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 64353#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 64305#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 64300#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 64298#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 64299#L2206-3 assume !(1 == ~currentHeading~0); 64551#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 61681#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 61157#L2222-7 assume { :end_inline_continueInDirection } true; 61158#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 58521#L228-1 assume !(-1 == ~expectedDirection~0); 58522#L240-1 assume !(1 == ~expectedDirection~0); 64235#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 63814#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 63813#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 63812#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 63809#L97-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 63810#L98-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 63811#L108-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 63803#L1643-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 63799#L1664-23 __utac_acc__Specification3_spec__1_#t~ret7#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret7#1;havoc __utac_acc__Specification3_spec__1_#t~ret7#1; 63797#L113-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 63733#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 63730#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 63727#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 63714#L2239-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 63712#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 63704#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 63705#L2479-6 assume !(1 == ~doorState~0); 64549#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 64545#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 64500#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 64495#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 64493#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 64494#L2206-6 assume !(1 == ~currentHeading~0); 65369#L2216-18 assume !(0 == ~currentFloorID~0); 61898#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 62116#L2222-13 assume { :end_inline_continueInDirection } true; 58299#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 63173#L228-2 assume !(-1 == ~expectedDirection~0); 63170#L240-2 assume !(1 == ~expectedDirection~0); 63168#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 63167#L2511-2 assume { :end_inline_timeShift } true; 63166#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 63163#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 63159#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 63158#L726-1 assume 0 == initPersonOnFloor_~floor#1; 63144#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 63123#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 63122#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 63116#L530-5 assume { :end_inline_callOnFloor } true; 63115#L870-1 assume { :end_inline_initPersonOnFloor } true; 63114#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 63113#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 63112#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 63111#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 63109#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 63107#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 63091#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 63082#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 63075#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 63068#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 63067#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 63061#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 63058#L2239-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 63057#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 63055#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 63054#L2479-9 assume !(1 == ~doorState~0); 63052#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 63048#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 63017#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 62998#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 62996#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 62997#L2206-9 assume !(1 == ~currentHeading~0); 63117#L2216-27 assume !(0 == ~currentFloorID~0); 62155#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 62461#L2222-19 assume { :end_inline_continueInDirection } true; 57481#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 61446#L228-3 assume !(-1 == ~expectedDirection~0); 57971#L240-3 assume !(1 == ~expectedDirection~0); 60935#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 60055#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 58139#L2988-2 [2022-07-22 02:29:16,941 INFO L754 eck$LassoCheckResult]: Loop: 58139#L2988-2 assume !false; 62799#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 58817#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 58818#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 60165#L2996 assume 1 != cleanup_~tmp___0~10#1; 60166#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 65413#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 65409#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 65379#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 65374#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 64236#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 64234#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 64233#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 64232#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 64231#L97-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 64229#L98-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 64228#L108-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 64216#L1643-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 64203#L1664-45 __utac_acc__Specification3_spec__1_#t~ret7#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret7#1;havoc __utac_acc__Specification3_spec__1_#t~ret7#1; 64196#L113-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 64188#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 64187#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 64181#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 64178#L2239-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 64177#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 64175#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 64174#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 64172#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 64169#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 64137#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 64118#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 64116#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 64117#L2206-12 assume !(1 == ~currentHeading~0); 64431#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 62661#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 60745#L2222-25 assume { :end_inline_continueInDirection } true; 60678#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 61547#L228-4 assume !(-1 == ~expectedDirection~0); 60863#L240-4 assume !(1 == ~expectedDirection~0); 59012#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 58138#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 58139#L2988-2 [2022-07-22 02:29:16,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:16,943 INFO L85 PathProgramCache]: Analyzing trace with hash 260109481, now seen corresponding path program 1 times [2022-07-22 02:29:16,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:16,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [624869124] [2022-07-22 02:29:16,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:16,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:16,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:17,039 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:17,039 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:17,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [624869124] [2022-07-22 02:29:17,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [624869124] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:17,040 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:17,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:17,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [318014393] [2022-07-22 02:29:17,041 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:17,042 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:17,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:17,043 INFO L85 PathProgramCache]: Analyzing trace with hash -1845002606, now seen corresponding path program 1 times [2022-07-22 02:29:17,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:17,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [544576939] [2022-07-22 02:29:17,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:17,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:17,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:17,083 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:17,083 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:17,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [544576939] [2022-07-22 02:29:17,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [544576939] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:17,084 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:17,084 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:17,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347760562] [2022-07-22 02:29:17,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:17,086 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:17,087 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:17,087 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:29:17,087 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:29:17,088 INFO L87 Difference]: Start difference. First operand 10322 states and 19179 transitions. cyclomatic complexity: 8858 Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:17,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:17,863 INFO L93 Difference]: Finished difference Result 24433 states and 45304 transitions. [2022-07-22 02:29:17,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:29:17,865 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24433 states and 45304 transitions. [2022-07-22 02:29:17,956 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8866 [2022-07-22 02:29:18,139 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24433 states to 24433 states and 45304 transitions. [2022-07-22 02:29:18,139 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24433 [2022-07-22 02:29:18,160 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24433 [2022-07-22 02:29:18,160 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24433 states and 45304 transitions. [2022-07-22 02:29:18,183 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:18,184 INFO L369 hiAutomatonCegarLoop]: Abstraction has 24433 states and 45304 transitions. [2022-07-22 02:29:18,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24433 states and 45304 transitions. [2022-07-22 02:29:18,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24433 to 10322. [2022-07-22 02:29:18,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10322 states, 10322 states have (on average 1.8526448362720402) internal successors, (19123), 10321 states have internal predecessors, (19123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:18,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10322 states to 10322 states and 19123 transitions. [2022-07-22 02:29:18,385 INFO L392 hiAutomatonCegarLoop]: Abstraction has 10322 states and 19123 transitions. [2022-07-22 02:29:18,385 INFO L374 stractBuchiCegarLoop]: Abstraction has 10322 states and 19123 transitions. [2022-07-22 02:29:18,385 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-22 02:29:18,386 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10322 states and 19123 transitions. [2022-07-22 02:29:18,411 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2310 [2022-07-22 02:29:18,411 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:18,411 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:18,414 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:18,414 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:18,414 INFO L752 eck$LassoCheckResult]: Stem: 97663#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 96300#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 96301#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 96969#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 93730#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 93731#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 94124#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 94220#L448 assume { :end_inline_initFloors } true; 97702#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 96399#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 94479#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 96710#L726 assume 0 == initPersonOnFloor_~floor#1; 96711#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 92085#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 96901#L518 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 93386#L530-2 assume { :end_inline_callOnFloor } true; 93387#L870 assume { :end_inline_initPersonOnFloor } true; 95331#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 95332#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 95393#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 93132#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 93133#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 95915#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 91623#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 93634#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 92879#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 93027#L455 assume !(0 == isFloorCalling_~floorID#1); 93028#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 93009#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 93179#L2239 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 93180#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 96485#L2388 assume !(0 != timeShift_~tmp___9~3#1); 96486#L2479 assume !(1 == ~doorState~0); 96991#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 97418#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 93872#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 93873#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 93375#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 94570#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 95632#L2206 assume !(1 == ~currentHeading~0); 93564#L2216 assume !(0 == ~currentFloorID~0); 93565#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 93619#L2222-1 assume { :end_inline_continueInDirection } true; 93620#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 98229#L228 assume !(-1 == ~expectedDirection~0); 98226#L240 assume !(1 == ~expectedDirection~0); 98224#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 98223#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 98222#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 98221#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 98218#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 98219#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 98220#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 98217#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 98215#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 98189#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 98185#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 98184#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 98175#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 98171#L2239-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 98170#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 98168#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 98157#L2479-3 assume !(1 == ~doorState~0); 98154#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 98149#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 98104#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 98099#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 98098#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 95065#L2206-3 assume !(1 == ~currentHeading~0); 95067#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 96525#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 95983#L2222-7 assume { :end_inline_continueInDirection } true; 95984#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 93291#L228-1 assume !(-1 == ~expectedDirection~0); 93292#L240-1 assume !(1 == ~expectedDirection~0); 101069#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 101068#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 101067#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 99251#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 96264#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 96266#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 99203#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 99202#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 99195#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 99179#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 99177#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 99167#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 99163#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 99128#L2239-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 99126#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 99120#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 99108#L2479-6 assume !(1 == ~doorState~0); 99107#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 99098#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 99059#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 98339#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 98335#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 98331#L2206-6 assume !(1 == ~currentHeading~0); 98330#L2216-18 assume !(0 == ~currentFloorID~0); 96756#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 96984#L2222-13 assume { :end_inline_continueInDirection } true; 93067#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 92918#L228-2 assume !(-1 == ~expectedDirection~0); 92919#L240-2 assume !(1 == ~expectedDirection~0); 96597#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 94671#L2511-2 assume { :end_inline_timeShift } true; 94672#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 94751#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 93598#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 97560#L726-1 assume 0 == initPersonOnFloor_~floor#1; 94602#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 92008#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 96254#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 96251#L530-5 assume { :end_inline_callOnFloor } true; 93056#L870-1 assume { :end_inline_initPersonOnFloor } true; 93057#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 94786#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 95472#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 97427#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 97428#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 96990#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 91632#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 91634#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 94690#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 94692#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 95399#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 94109#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 97984#L2239-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 97983#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 97982#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 97981#L2479-9 assume !(1 == ~doorState~0); 97980#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 97979#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 97950#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 97931#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 97930#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 97929#L2206-9 assume !(1 == ~currentHeading~0); 97928#L2216-27 assume !(0 == ~currentFloorID~0); 97024#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 97355#L2222-19 assume { :end_inline_continueInDirection } true; 92245#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 96282#L228-3 assume !(-1 == ~expectedDirection~0); 99405#L240-3 assume !(1 == ~expectedDirection~0); 99404#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 94848#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 92905#L2988-2 [2022-07-22 02:29:18,414 INFO L754 eck$LassoCheckResult]: Loop: 92905#L2988-2 assume !false; 97731#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 93590#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 93591#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 94959#L2996 assume 1 != cleanup_~tmp___0~10#1; 94960#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 97234#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 96350#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 97446#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 91827#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 94192#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 95402#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 95403#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 96809#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 96216#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 96217#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 99357#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 99355#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 99352#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 99331#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 99327#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 99326#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 99315#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 99311#L2239-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 99310#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 99309#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 99308#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 99307#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 99284#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 99275#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 99256#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 99254#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 99253#L2206-12 assume !(1 == ~currentHeading~0); 99252#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 97581#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 95558#L2222-25 assume { :end_inline_continueInDirection } true; 95487#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 96388#L228-4 assume !(-1 == ~expectedDirection~0); 95680#L240-4 assume !(1 == ~expectedDirection~0); 93787#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 92904#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 92905#L2988-2 [2022-07-22 02:29:18,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:18,415 INFO L85 PathProgramCache]: Analyzing trace with hash 955627945, now seen corresponding path program 1 times [2022-07-22 02:29:18,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:18,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834995311] [2022-07-22 02:29:18,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:18,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:18,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:18,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:18,479 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:18,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [834995311] [2022-07-22 02:29:18,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [834995311] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:18,479 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:18,480 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:18,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1541739608] [2022-07-22 02:29:18,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:18,483 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:18,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:18,483 INFO L85 PathProgramCache]: Analyzing trace with hash 1552264010, now seen corresponding path program 1 times [2022-07-22 02:29:18,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:18,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1631534677] [2022-07-22 02:29:18,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:18,488 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:18,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:18,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:18,522 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:18,522 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1631534677] [2022-07-22 02:29:18,522 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1631534677] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:18,523 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:18,523 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:29:18,523 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [187206377] [2022-07-22 02:29:18,523 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:18,523 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:18,523 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:18,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:29:18,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:29:18,525 INFO L87 Difference]: Start difference. First operand 10322 states and 19123 transitions. cyclomatic complexity: 8802 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:18,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:18,802 INFO L93 Difference]: Finished difference Result 22634 states and 41995 transitions. [2022-07-22 02:29:18,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 02:29:18,803 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22634 states and 41995 transitions. [2022-07-22 02:29:18,891 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8300 [2022-07-22 02:29:18,970 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22634 states to 22634 states and 41995 transitions. [2022-07-22 02:29:18,970 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22634 [2022-07-22 02:29:18,991 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22634 [2022-07-22 02:29:18,992 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22634 states and 41995 transitions. [2022-07-22 02:29:19,013 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:19,013 INFO L369 hiAutomatonCegarLoop]: Abstraction has 22634 states and 41995 transitions. [2022-07-22 02:29:19,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22634 states and 41995 transitions. [2022-07-22 02:29:19,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22634 to 10340. [2022-07-22 02:29:19,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10340 states, 10340 states have (on average 1.8511605415860735) internal successors, (19141), 10339 states have internal predecessors, (19141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:19,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10340 states to 10340 states and 19141 transitions. [2022-07-22 02:29:19,207 INFO L392 hiAutomatonCegarLoop]: Abstraction has 10340 states and 19141 transitions. [2022-07-22 02:29:19,207 INFO L374 stractBuchiCegarLoop]: Abstraction has 10340 states and 19141 transitions. [2022-07-22 02:29:19,207 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-22 02:29:19,207 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10340 states and 19141 transitions. [2022-07-22 02:29:19,235 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2314 [2022-07-22 02:29:19,235 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:19,235 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:19,238 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:19,238 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:19,238 INFO L752 eck$LassoCheckResult]: Stem: 130589#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 129248#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 129249#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 129917#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 126705#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 126706#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 127096#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 127191#L448 assume { :end_inline_initFloors } true; 130631#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 129346#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 127448#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 129657#L726 assume 0 == initPersonOnFloor_~floor#1; 129658#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 125064#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 129847#L518 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 126363#L530-2 assume { :end_inline_callOnFloor } true; 126364#L870 assume { :end_inline_initPersonOnFloor } true; 128294#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 128295#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 128355#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 126110#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 126111#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 128868#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 124601#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 126611#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 125858#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 126005#L455 assume !(0 == isFloorCalling_~floorID#1); 126006#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 125987#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 126157#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 126159#L1643-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 125576#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 128650#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 128651#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 131258#L2388 assume !(0 != timeShift_~tmp___9~3#1); 129938#L2479 assume !(1 == ~doorState~0); 129939#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 130356#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 126848#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 126849#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 126353#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 127539#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 128589#L2206 assume !(1 == ~currentHeading~0); 126540#L2216 assume !(0 == ~currentFloorID~0); 126541#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 126595#L2222-1 assume { :end_inline_continueInDirection } true; 126596#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 131271#L228 assume !(-1 == ~expectedDirection~0); 131268#L240 assume !(1 == ~expectedDirection~0); 131266#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 131263#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 131262#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 131261#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 127440#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 127442#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 131239#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 131234#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 131232#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 131230#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 131220#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 131215#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 131205#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 131203#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 131098#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 131092#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 131088#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 131087#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 131086#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 131083#L2479-3 assume !(1 == ~doorState~0); 131043#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 131035#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 131019#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 131014#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 131011#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 131012#L2206-3 assume !(1 == ~currentHeading~0); 131256#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 129474#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 128937#L2222-7 assume { :end_inline_continueInDirection } true; 128938#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 126268#L228-1 assume !(-1 == ~expectedDirection~0); 126269#L240-1 assume !(1 == ~expectedDirection~0); 127515#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 128558#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 129285#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 128116#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 128117#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 129215#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 131432#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 131426#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 131412#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 131406#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 131195#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 131192#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 131189#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 131188#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 131185#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 131182#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 131181#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 131180#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 131179#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 131174#L2479-6 assume !(1 == ~doorState~0); 131172#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 131171#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 131131#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 131126#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 131120#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 131121#L2206-6 assume !(1 == ~currentHeading~0); 131257#L2216-18 assume !(0 == ~currentFloorID~0); 129703#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 129932#L2222-13 assume { :end_inline_continueInDirection } true; 126045#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 125896#L228-2 assume !(-1 == ~expectedDirection~0); 125897#L240-2 assume !(1 == ~expectedDirection~0); 129547#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 127641#L2511-2 assume { :end_inline_timeShift } true; 127642#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 127719#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 126574#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 130490#L726-1 assume 0 == initPersonOnFloor_~floor#1; 127572#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 124986#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 131773#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 131508#L530-5 assume { :end_inline_callOnFloor } true; 131499#L870-1 assume { :end_inline_initPersonOnFloor } true; 131306#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 131305#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 131304#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 131302#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 131301#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 131299#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 131294#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 131292#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 131275#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 130527#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 128361#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 127081#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 127272#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 129686#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 126487#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 126443#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 126445#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 131441#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 128142#L2479-9 assume !(1 == ~doorState~0); 128143#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 130665#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 130787#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 125002#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 129241#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 129242#L2206-9 assume !(1 == ~currentHeading~0); 130837#L2216-27 assume !(0 == ~currentFloorID~0); 129972#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 130291#L2222-19 assume { :end_inline_continueInDirection } true; 125224#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 129230#L228-3 assume !(-1 == ~expectedDirection~0); 125716#L240-3 assume !(1 == ~expectedDirection~0); 128710#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 127816#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 125883#L2988-2 [2022-07-22 02:29:19,239 INFO L754 eck$LassoCheckResult]: Loop: 125883#L2988-2 assume !false; 130661#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 126566#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 126567#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 127928#L2996 assume 1 != cleanup_~tmp___0~10#1; 127929#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 130180#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 129297#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 130381#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 124805#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 127164#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 128922#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 133208#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 133207#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 133206#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 133205#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 133199#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 133186#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 133182#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 133111#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 131401#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 131400#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 131395#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 131394#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 131393#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 131388#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 131386#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 131385#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 131376#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 131371#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 131370#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 131355#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 131346#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 131327#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 131325#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 131324#L2206-12 assume !(1 == ~currentHeading~0); 131323#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 130507#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 128517#L2222-25 assume { :end_inline_continueInDirection } true; 128450#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 129335#L228-4 assume !(-1 == ~expectedDirection~0); 128636#L240-4 assume !(1 == ~expectedDirection~0); 126762#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 125882#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 125883#L2988-2 [2022-07-22 02:29:19,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:19,240 INFO L85 PathProgramCache]: Analyzing trace with hash -1271951735, now seen corresponding path program 1 times [2022-07-22 02:29:19,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:19,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2064965726] [2022-07-22 02:29:19,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:19,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:19,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:19,299 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:19,299 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:19,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2064965726] [2022-07-22 02:29:19,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2064965726] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:19,300 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:19,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:19,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [4522137] [2022-07-22 02:29:19,300 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:19,301 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:19,301 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:19,301 INFO L85 PathProgramCache]: Analyzing trace with hash -1641811376, now seen corresponding path program 1 times [2022-07-22 02:29:19,301 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:19,301 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [189725937] [2022-07-22 02:29:19,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:19,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:19,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:19,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:19,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:19,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [189725937] [2022-07-22 02:29:19,336 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [189725937] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:19,336 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:19,336 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:29:19,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [654437757] [2022-07-22 02:29:19,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:19,337 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:19,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:19,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 02:29:19,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 02:29:19,337 INFO L87 Difference]: Start difference. First operand 10340 states and 19141 transitions. cyclomatic complexity: 8802 Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 7 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:21,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:21,974 INFO L93 Difference]: Finished difference Result 64309 states and 119371 transitions. [2022-07-22 02:29:21,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-07-22 02:29:21,975 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64309 states and 119371 transitions. [2022-07-22 02:29:22,202 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23229 [2022-07-22 02:29:22,394 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64309 states to 64309 states and 119371 transitions. [2022-07-22 02:29:22,394 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64309 [2022-07-22 02:29:22,440 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64309 [2022-07-22 02:29:22,441 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64309 states and 119371 transitions. [2022-07-22 02:29:22,489 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:22,490 INFO L369 hiAutomatonCegarLoop]: Abstraction has 64309 states and 119371 transitions. [2022-07-22 02:29:22,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64309 states and 119371 transitions. [2022-07-22 02:29:22,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64309 to 20639. [2022-07-22 02:29:22,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20639 states, 20639 states have (on average 1.8507195116042443) internal successors, (38197), 20638 states have internal predecessors, (38197), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:22,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20639 states to 20639 states and 38197 transitions. [2022-07-22 02:29:22,987 INFO L392 hiAutomatonCegarLoop]: Abstraction has 20639 states and 38197 transitions. [2022-07-22 02:29:22,988 INFO L374 stractBuchiCegarLoop]: Abstraction has 20639 states and 38197 transitions. [2022-07-22 02:29:22,988 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-22 02:29:22,988 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20639 states and 38197 transitions. [2022-07-22 02:29:23,052 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4638 [2022-07-22 02:29:23,052 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:23,053 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:23,056 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:23,057 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:23,058 INFO L752 eck$LassoCheckResult]: Stem: 205811#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 204166#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 204167#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 204928#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 201450#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 201451#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 201851#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 201955#L448 assume { :end_inline_initFloors } true; 205866#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 204272#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 202217#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 204623#L726 assume 0 == initPersonOnFloor_~floor#1; 204624#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 199764#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 204842#L518 assume !(0 == callOnFloor_~floorID#1); 202018#L521 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 202020#L530-2 assume { :end_inline_callOnFloor } true; 206790#L870 assume { :end_inline_initPersonOnFloor } true; 206789#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 206788#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 206787#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 206786#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 203738#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 203739#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 206795#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 201501#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 200575#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 200723#L455 assume !(0 == isFloorCalling_~floorID#1); 200724#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 201157#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 201158#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 205027#L1643-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 200283#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 203506#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 203508#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 206261#L2388 assume !(0 != timeShift_~tmp___9~3#1); 204955#L2479 assume !(1 == ~doorState~0); 204956#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 205492#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 205493#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 201935#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 201080#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 202316#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 203440#L2206 assume !(1 == ~currentHeading~0); 201273#L2216 assume !(0 == ~currentFloorID~0); 201274#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 201334#L2222-1 assume { :end_inline_continueInDirection } true; 201335#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 206231#L228 assume !(-1 == ~expectedDirection~0); 202693#L240 assume !(1 == ~expectedDirection~0); 202694#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 206937#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 206932#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 206923#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 206647#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 206642#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 206641#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 206636#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 206616#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 206601#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 206592#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 206591#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 206586#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 206585#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 206584#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 206579#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 206577#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 206576#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 206574#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 206573#L2479-3 assume !(1 == ~doorState~0); 206572#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 206570#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 206512#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 206509#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 206508#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 202839#L2206-3 assume !(1 == ~currentHeading~0); 202841#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 204408#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 204409#L2222-7 assume { :end_inline_continueInDirection } true; 207281#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 207279#L228-1 assume !(-1 == ~expectedDirection~0); 207276#L240-1 assume !(1 == ~expectedDirection~0); 207272#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 207270#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 207269#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 207264#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 207262#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 207260#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 207257#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 207254#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 207236#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 207211#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 207196#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 207177#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 201187#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 203080#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 206242#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 200131#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 200132#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 201068#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 207184#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 205252#L2479-6 assume !(1 == ~doorState~0); 205253#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 203045#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 203046#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 207009#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 207004#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 206998#L2206-6 assume !(1 == ~currentHeading~0); 206994#L2216-18 assume !(0 == ~currentFloorID~0); 204679#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 205609#L2222-13 assume { :end_inline_continueInDirection } true; 200763#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 212228#L228-2 assume !(-1 == ~expectedDirection~0); 212224#L240-2 assume !(1 == ~expectedDirection~0); 212221#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 212220#L2511-2 assume { :end_inline_timeShift } true; 212219#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 212216#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 212212#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 212210#L726-1 assume 0 == initPersonOnFloor_~floor#1; 212126#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 212094#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 208419#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 208410#L530-5 assume { :end_inline_callOnFloor } true; 208408#L870-1 assume { :end_inline_initPersonOnFloor } true; 208407#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 208406#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 208405#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 208403#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 208402#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 206085#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 215179#L1664-38 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 214350#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 208442#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 203199#L455-63 assume !(0 == isFloorCalling_~floorID#1); 203200#L459-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 206434#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 206435#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 205541#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 201219#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 201175#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 201177#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 206996#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 202963#L2479-9 assume !(1 == ~doorState~0); 202964#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 205915#L1830-6 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 204511#L1029-15 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 204512#L1834-6 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 213319#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 213424#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 202291#L2206-9 assume !(1 == ~currentHeading~0); 202292#L2216-27 assume !(0 == ~currentFloorID~0); 205001#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 205402#L2222-19 assume { :end_inline_continueInDirection } true; 213242#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 213240#L228-3 assume !(-1 == ~expectedDirection~0); 213237#L240-3 assume !(1 == ~expectedDirection~0); 213235#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 213234#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 213232#L2988-2 [2022-07-22 02:29:23,059 INFO L754 eck$LassoCheckResult]: Loop: 213232#L2988-2 assume !false; 213231#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 213230#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 213229#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 213212#L2996 assume 1 != cleanup_~tmp___0~10#1; 206123#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 205256#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 205257#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 213141#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 213136#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 213135#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 213134#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 213133#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 213132#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 213130#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 213131#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 213191#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 215541#L1664-49 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 215523#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 213025#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 213026#L455-89 assume !(0 == isFloorCalling_~floorID#1); 213007#L459-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 213008#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 212637#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 212639#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 204333#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 204334#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 215505#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 215503#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 202774#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 202775#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 206026#L1830-8 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 206028#L1029-20 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 200156#L1834-8 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 199363#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 200913#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 200915#L2206-12 assume !(1 == ~currentHeading~0); 202040#L2216-36 assume !(0 == ~currentFloorID~0); 205699#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 206002#L2222-25 assume { :end_inline_continueInDirection } true; 215258#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 215256#L228-4 assume !(-1 == ~expectedDirection~0); 215253#L240-4 assume !(1 == ~expectedDirection~0); 215251#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 213233#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 213232#L2988-2 [2022-07-22 02:29:23,059 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:23,060 INFO L85 PathProgramCache]: Analyzing trace with hash -1915815576, now seen corresponding path program 1 times [2022-07-22 02:29:23,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:23,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1392732396] [2022-07-22 02:29:23,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:23,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:23,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:23,123 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:23,125 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:23,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1392732396] [2022-07-22 02:29:23,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1392732396] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:23,125 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:23,125 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:23,129 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1336453272] [2022-07-22 02:29:23,129 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:23,130 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:23,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:23,132 INFO L85 PathProgramCache]: Analyzing trace with hash 1008329383, now seen corresponding path program 1 times [2022-07-22 02:29:23,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:23,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1894901992] [2022-07-22 02:29:23,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:23,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:23,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:23,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:23,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:23,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1894901992] [2022-07-22 02:29:23,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1894901992] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:23,171 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:23,171 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:29:23,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [461760671] [2022-07-22 02:29:23,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:23,172 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:23,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:23,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:29:23,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:29:23,173 INFO L87 Difference]: Start difference. First operand 20639 states and 38197 transitions. cyclomatic complexity: 17559 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:27,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:27,831 INFO L93 Difference]: Finished difference Result 52580 states and 97463 transitions. [2022-07-22 02:29:27,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 02:29:27,832 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52580 states and 97463 transitions. [2022-07-22 02:29:28,069 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13280 [2022-07-22 02:29:28,422 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52580 states to 52580 states and 97463 transitions. [2022-07-22 02:29:28,423 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52580 [2022-07-22 02:29:28,451 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52580 [2022-07-22 02:29:28,451 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52580 states and 97463 transitions. [2022-07-22 02:29:28,474 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:28,475 INFO L369 hiAutomatonCegarLoop]: Abstraction has 52580 states and 97463 transitions. [2022-07-22 02:29:28,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52580 states and 97463 transitions. [2022-07-22 02:29:28,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52580 to 20067. [2022-07-22 02:29:28,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20067 states, 20067 states have (on average 1.8511486520157472) internal successors, (37147), 20066 states have internal predecessors, (37147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:28,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20067 states to 20067 states and 37147 transitions. [2022-07-22 02:29:28,947 INFO L392 hiAutomatonCegarLoop]: Abstraction has 20067 states and 37147 transitions. [2022-07-22 02:29:28,947 INFO L374 stractBuchiCegarLoop]: Abstraction has 20067 states and 37147 transitions. [2022-07-22 02:29:28,948 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-22 02:29:28,948 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20067 states and 37147 transitions. [2022-07-22 02:29:29,017 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4495 [2022-07-22 02:29:29,017 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:29,017 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:29,022 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:29,022 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:29,022 INFO L752 eck$LassoCheckResult]: Stem: 278748#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 277279#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 277280#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 277981#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 274663#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 274664#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 275056#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 275156#L448 assume { :end_inline_initFloors } true; 278793#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 277380#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 275414#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 277704#L726 assume 0 == initPersonOnFloor_~floor#1; 277705#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 273005#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 277904#L518 assume !(0 == callOnFloor_~floorID#1); 275220#L521 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 275222#L530-2 assume { :end_inline_callOnFloor } true; 276772#L870 assume { :end_inline_initPersonOnFloor } true; 276773#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 276358#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 276359#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 274054#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 274055#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 276882#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 283078#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 274714#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 273802#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 273947#L455 assume !(0 == isFloorCalling_~floorID#1); 273948#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 274378#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 274104#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 274106#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 276635#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 273517#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 276660#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 276661#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 279074#L2388 assume !(0 != timeShift_~tmp___9~3#1); 278007#L2479 assume !(1 == ~doorState~0); 278008#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 278814#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 274806#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 274807#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 275510#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 275511#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 278593#L2206 assume !(1 == ~currentHeading~0); 278594#L2216 assume !(0 == ~currentFloorID~0); 277081#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 277082#L2222-1 assume { :end_inline_continueInDirection } true; 282888#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 282886#L228 assume !(-1 == ~expectedDirection~0); 282883#L240 assume !(1 == ~expectedDirection~0); 282881#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 282880#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 282879#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 282877#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 282871#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 282870#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 282869#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 282864#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 282850#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 282844#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 282838#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 282837#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 282836#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 282832#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 282834#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 282889#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 282835#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 282827#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 282828#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 276481#L2479-3 assume !(1 == ~doorState~0); 276482#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 277888#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 277889#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 292441#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 292439#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 292440#L2206-3 assume !(1 == ~currentHeading~0); 292500#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 277511#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 277512#L2222-7 assume { :end_inline_continueInDirection } true; 281181#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 281179#L228-1 assume !(-1 == ~expectedDirection~0); 281176#L240-1 assume !(1 == ~expectedDirection~0); 281174#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 281173#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 281172#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 281171#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 281169#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 281170#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 281167#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 281163#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 281160#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 281127#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 280844#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 280843#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 280842#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 280841#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 280838#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 280835#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 280833#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 280832#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 280806#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 278280#L2479-6 assume !(1 == ~doorState~0); 278281#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 276213#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 276214#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 291150#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 291147#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 291148#L2206-6 assume !(1 == ~currentHeading~0); 292498#L2216-18 assume !(0 == ~currentFloorID~0); 277753#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 278001#L2222-13 assume { :end_inline_continueInDirection } true; 279195#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 279193#L228-2 assume !(-1 == ~expectedDirection~0); 279190#L240-2 assume !(1 == ~expectedDirection~0); 279188#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 279187#L2511-2 assume { :end_inline_timeShift } true; 279186#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 279183#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 279179#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 279178#L726-1 assume 0 == initPersonOnFloor_~floor#1; 279164#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 279143#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 279141#L518-2 assume !(0 == callOnFloor_~floorID#1); 279137#L521-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 279136#L530-5 assume { :end_inline_callOnFloor } true; 279135#L870-1 assume { :end_inline_initPersonOnFloor } true; 279134#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 279133#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 279132#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 279129#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 279130#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 279131#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 279127#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 279125#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 279093#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 279090#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 279088#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 279087#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 279085#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 279083#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 279020#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 279021#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 288056#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 288057#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 276136#L2479-9 assume !(1 == ~doorState~0); 276137#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 279001#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 279002#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 292198#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 292196#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 292197#L2206-9 assume !(1 == ~currentHeading~0); 292258#L2216-27 assume !(0 == ~currentFloorID~0); 278043#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 278405#L2222-19 assume { :end_inline_continueInDirection } true; 284366#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 284363#L228-3 assume !(-1 == ~expectedDirection~0); 284357#L240-3 assume !(1 == ~expectedDirection~0); 284352#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 284350#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 284348#L2988-2 [2022-07-22 02:29:29,023 INFO L754 eck$LassoCheckResult]: Loop: 284348#L2988-2 assume !false; 284347#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 284346#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 284345#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 284344#L2996 assume 1 != cleanup_~tmp___0~10#1; 284343#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 284333#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 284334#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 284317#L1734 assume !(0 != anyStopRequested_~tmp___3~1#1); 284305#L1738 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 284299#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 284298#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 284297#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 284296#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 284295#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 284292#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 284293#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 284294#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 284291#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 284289#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 284254#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 284251#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 284249#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 284248#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 284192#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 284189#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 284190#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 287229#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 287230#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 287228#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 275959#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 275960#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 278660#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 278935#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 292320#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 292318#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 292319#L2206-12 assume !(1 == ~currentHeading~0); 292497#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 278657#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 278914#L2222-25 assume { :end_inline_continueInDirection } true; 284365#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 284360#L228-4 assume !(-1 == ~expectedDirection~0); 284354#L240-4 assume !(1 == ~expectedDirection~0); 284351#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 284349#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 284348#L2988-2 [2022-07-22 02:29:29,024 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:29,024 INFO L85 PathProgramCache]: Analyzing trace with hash 367298790, now seen corresponding path program 1 times [2022-07-22 02:29:29,024 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:29,024 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14163116] [2022-07-22 02:29:29,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:29,025 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:29,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:29,085 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:29,086 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:29,086 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14163116] [2022-07-22 02:29:29,086 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [14163116] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:29,086 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:29,086 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:29,087 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [335883309] [2022-07-22 02:29:29,087 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:29,087 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:29,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:29,088 INFO L85 PathProgramCache]: Analyzing trace with hash 222092072, now seen corresponding path program 1 times [2022-07-22 02:29:29,088 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:29,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [989169419] [2022-07-22 02:29:29,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:29,088 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:29,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:29,114 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:29,114 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:29,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [989169419] [2022-07-22 02:29:29,115 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [989169419] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:29,115 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:29,115 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:29:29,115 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1114277245] [2022-07-22 02:29:29,115 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:29,115 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:29,116 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:29,116 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:29:29,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:29:29,116 INFO L87 Difference]: Start difference. First operand 20067 states and 37147 transitions. cyclomatic complexity: 17081 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:31,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:31,065 INFO L93 Difference]: Finished difference Result 88773 states and 164990 transitions. [2022-07-22 02:29:31,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 02:29:31,066 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 88773 states and 164990 transitions. [2022-07-22 02:29:31,399 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22611 [2022-07-22 02:29:31,809 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 88773 states to 88773 states and 164990 transitions. [2022-07-22 02:29:31,809 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 88773 [2022-07-22 02:29:31,859 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 88773 [2022-07-22 02:29:31,860 INFO L73 IsDeterministic]: Start isDeterministic. Operand 88773 states and 164990 transitions. [2022-07-22 02:29:31,903 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:31,903 INFO L369 hiAutomatonCegarLoop]: Abstraction has 88773 states and 164990 transitions. [2022-07-22 02:29:31,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88773 states and 164990 transitions. [2022-07-22 02:29:32,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88773 to 39019. [2022-07-22 02:29:32,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39019 states, 39019 states have (on average 1.851021297316692) internal successors, (72225), 39018 states have internal predecessors, (72225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:32,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39019 states to 39019 states and 72225 transitions. [2022-07-22 02:29:32,525 INFO L392 hiAutomatonCegarLoop]: Abstraction has 39019 states and 72225 transitions. [2022-07-22 02:29:32,525 INFO L374 stractBuchiCegarLoop]: Abstraction has 39019 states and 72225 transitions. [2022-07-22 02:29:32,525 INFO L287 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-07-22 02:29:32,525 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39019 states and 72225 transitions. [2022-07-22 02:29:32,624 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8864 [2022-07-22 02:29:32,624 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:32,625 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:32,631 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:32,631 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:32,631 INFO L752 eck$LassoCheckResult]: Stem: 387745#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 386207#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 386208#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 386928#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 383530#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 383531#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 383932#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 384034#L448 assume { :end_inline_initFloors } true; 387800#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 386311#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 384299#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 386639#L726 assume 0 == initPersonOnFloor_~floor#1; 386640#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 381867#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 386850#L518 assume !(0 == callOnFloor_~floorID#1); 384099#L521 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 384101#L530-2 assume { :end_inline_callOnFloor } true; 388520#L870 assume { :end_inline_initPersonOnFloor } true; 388519#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 388518#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 388517#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 388515#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 388516#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 388525#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 388521#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 383582#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 382667#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 382813#L455 assume !(0 == isFloorCalling_~floorID#1); 382814#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 382795#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 382965#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 382967#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 385547#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 382382#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 385572#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 385573#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 388151#L2388 assume !(0 != timeShift_~tmp___9~3#1); 386952#L2479 assume !(1 == ~doorState~0); 386953#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 387443#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 383676#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 383677#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 388278#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 388275#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 388271#L2206 assume !(1 == ~currentHeading~0); 388265#L2216 assume !(0 == ~currentFloorID~0); 388259#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 388256#L2222-1 assume { :end_inline_continueInDirection } true; 388253#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 388251#L228 assume !(-1 == ~expectedDirection~0); 388248#L240 assume !(1 == ~expectedDirection~0); 388246#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 388245#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 388244#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 388243#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 388240#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 388241#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 388236#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 388221#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 388206#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 388199#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 388193#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 388191#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 388190#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 388188#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 388185#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 388187#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 389151#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 389149#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 389145#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 389143#L2479-3 assume !(1 == ~doorState~0); 389141#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 389137#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 389119#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 389112#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 389108#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 389109#L2206-3 assume !(1 == ~currentHeading~0); 390305#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 390286#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 390287#L2222-7 assume { :end_inline_continueInDirection } true; 393879#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 393876#L228-1 assume !(-1 == ~expectedDirection~0); 393871#L240-1 assume !(1 == ~expectedDirection~0); 393726#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 393725#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 393724#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 393723#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 393720#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 393716#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 393713#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 393711#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 393705#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 393700#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 393485#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 393483#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 393477#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 392178#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 392174#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 392170#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 392167#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 392165#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 392158#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 392153#L2479-6 assume !(1 == ~doorState~0); 392150#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 392109#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 392062#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 392038#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 392035#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 392036#L2206-6 assume !(1 == ~currentHeading~0); 419450#L2216-18 assume !(0 == ~currentFloorID~0); 386690#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 386943#L2222-13 assume { :end_inline_continueInDirection } true; 416398#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 416396#L228-2 assume !(-1 == ~expectedDirection~0); 416393#L240-2 assume !(1 == ~expectedDirection~0); 416391#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 416390#L2511-2 assume { :end_inline_timeShift } true; 416389#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 416386#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 416382#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 416381#L726-1 assume 0 == initPersonOnFloor_~floor#1; 402282#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 402256#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 399520#L518-2 assume !(0 == callOnFloor_~floorID#1); 399521#L521-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 402411#L530-5 assume { :end_inline_callOnFloor } true; 402409#L870-1 assume { :end_inline_initPersonOnFloor } true; 402407#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 402405#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 402403#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 402402#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 388008#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 386950#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 386951#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 418827#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 389986#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 388794#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 388791#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 388789#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 388783#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 388782#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 388777#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 388775#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 388773#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 388767#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 388759#L2479-9 assume !(1 == ~doorState~0); 388755#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 388730#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 388731#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 388653#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 388654#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 389453#L2206-9 assume !(1 == ~currentHeading~0); 388796#L2216-27 assume !(0 == ~currentFloorID~0); 388797#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 416898#L2222-19 assume { :end_inline_continueInDirection } true; 416895#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 416890#L228-3 assume !(-1 == ~expectedDirection~0); 416884#L240-3 assume !(1 == ~expectedDirection~0); 416881#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 416880#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 416878#L2988-2 [2022-07-22 02:29:32,632 INFO L754 eck$LassoCheckResult]: Loop: 416878#L2988-2 assume !false; 416559#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 416558#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 416557#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 416556#L2996 assume 1 != cleanup_~tmp___0~10#1; 416555#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 416554#L455-84 assume !(0 == isFloorCalling_~floorID#1); 416093#L459-84 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 416088#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 414102#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 414096#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 414094#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 414087#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 414085#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 408147#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 408030#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 408031#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 419186#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 419185#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 419184#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 389973#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 388899#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 388895#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 388893#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 388890#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 388889#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 388884#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 388883#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 388882#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 388881#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 388880#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 388879#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 388877#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 388863#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 388865#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 389679#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 389681#L2206-12 assume !(1 == ~currentHeading~0); 389674#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 389675#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 416867#L2222-25 assume { :end_inline_continueInDirection } true; 416896#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 416893#L228-4 assume !(-1 == ~expectedDirection~0); 416887#L240-4 assume !(1 == ~expectedDirection~0); 416882#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 416879#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 416878#L2988-2 [2022-07-22 02:29:32,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:32,633 INFO L85 PathProgramCache]: Analyzing trace with hash 367298790, now seen corresponding path program 2 times [2022-07-22 02:29:32,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:32,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [563936113] [2022-07-22 02:29:32,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:32,634 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:32,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:32,671 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:32,671 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:32,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [563936113] [2022-07-22 02:29:32,671 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [563936113] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:32,671 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:32,672 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:32,672 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1991632288] [2022-07-22 02:29:32,672 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:32,672 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:32,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:32,673 INFO L85 PathProgramCache]: Analyzing trace with hash -1097208195, now seen corresponding path program 1 times [2022-07-22 02:29:32,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:32,675 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [258052714] [2022-07-22 02:29:32,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:32,675 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:32,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:32,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:32,685 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:32,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [258052714] [2022-07-22 02:29:32,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [258052714] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:32,686 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:32,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:29:32,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1164068844] [2022-07-22 02:29:32,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:32,687 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:32,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:32,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:29:32,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:29:32,687 INFO L87 Difference]: Start difference. First operand 39019 states and 72225 transitions. cyclomatic complexity: 33207 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:33,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:33,641 INFO L93 Difference]: Finished difference Result 43379 states and 79963 transitions. [2022-07-22 02:29:33,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:29:33,642 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 43379 states and 79963 transitions. [2022-07-22 02:29:33,937 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9370 [2022-07-22 02:29:34,041 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 43379 states to 43379 states and 79963 transitions. [2022-07-22 02:29:34,041 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43379 [2022-07-22 02:29:34,066 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43379 [2022-07-22 02:29:34,067 INFO L73 IsDeterministic]: Start isDeterministic. Operand 43379 states and 79963 transitions. [2022-07-22 02:29:34,092 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:34,092 INFO L369 hiAutomatonCegarLoop]: Abstraction has 43379 states and 79963 transitions. [2022-07-22 02:29:34,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43379 states and 79963 transitions. [2022-07-22 02:29:34,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43379 to 38599. [2022-07-22 02:29:34,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38599 states, 38599 states have (on average 1.847897613927822) internal successors, (71327), 38598 states have internal predecessors, (71327), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:34,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38599 states to 38599 states and 71327 transitions. [2022-07-22 02:29:34,639 INFO L392 hiAutomatonCegarLoop]: Abstraction has 38599 states and 71327 transitions. [2022-07-22 02:29:34,639 INFO L374 stractBuchiCegarLoop]: Abstraction has 38599 states and 71327 transitions. [2022-07-22 02:29:34,639 INFO L287 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-07-22 02:29:34,639 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38599 states and 71327 transitions. [2022-07-22 02:29:34,732 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8684 [2022-07-22 02:29:34,732 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:34,732 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:34,738 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:34,738 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:34,738 INFO L752 eck$LassoCheckResult]: Stem: 469152#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 469153#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 469052#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 466382#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 466383#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 467510#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 468032#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 468169#L448 assume { :end_inline_initFloors } true; 469296#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 463894#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 463895#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 465260#L726 assume 0 == initPersonOnFloor_~floor#1; 465261#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 463982#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 466106#L518 assume !(0 == callOnFloor_~floorID#1); 466108#L521 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 466997#L530-2 assume { :end_inline_callOnFloor } true; 466998#L870 assume { :end_inline_initPersonOnFloor } true; 469499#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 469500#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 464479#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 464480#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 466589#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 469769#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 463879#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 467362#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 464791#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 466411#L455 assume !(0 == isFloorCalling_~floorID#1); 466412#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 466393#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 466662#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 466664#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 466713#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 465703#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 468354#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 469812#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 470111#L2388 assume !(0 != timeShift_~tmp___9~3#1); 466499#L2479 assume !(1 == ~doorState~0); 466500#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 468173#L1830 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 467716#L1029 stopRequestedInDirection_#t~ret55#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~11#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 467717#L1834 assume 0 != stopRequestedInDirection_~tmp~11#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 468136#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 494786#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 494782#L2206 assume !(1 == ~currentHeading~0); 494779#L2216 assume !(0 == ~currentFloorID~0); 494776#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 494775#L2222-1 assume { :end_inline_continueInDirection } true; 494772#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 494770#L228 assume !(-1 == ~expectedDirection~0); 494763#L240 assume !(1 == ~expectedDirection~0); 494760#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 494759#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 494758#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 494756#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 494753#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 494750#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 494748#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 494747#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 494742#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 494739#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 485401#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 485399#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 485394#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 485389#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 485390#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 485393#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 485391#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 485392#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 483327#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 482834#L2479-3 assume !(1 == ~doorState~0); 482833#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 482831#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 482659#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 482653#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 482650#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 482646#L2206-3 assume !(1 == ~currentHeading~0); 482642#L2216-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 482638#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 482637#L2222-7 assume { :end_inline_continueInDirection } true; 482633#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 482631#L228-1 assume !(-1 == ~expectedDirection~0); 482624#L240-1 assume !(1 == ~expectedDirection~0); 482621#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 482620#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 482619#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 482618#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 482615#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 482611#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 482608#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 482606#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 482600#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 482595#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 482589#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 482587#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 482586#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 482585#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 482582#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 482579#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 482577#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 482576#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 482574#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 482573#L2479-6 assume !(1 == ~doorState~0); 482572#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 482569#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 482570#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 482540#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 488013#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 488012#L2206-6 assume !(1 == ~currentHeading~0); 488008#L2216-18 assume !(0 == ~currentFloorID~0); 486772#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 482220#L2222-13 assume { :end_inline_continueInDirection } true; 482216#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 482214#L228-2 assume !(-1 == ~expectedDirection~0); 482211#L240-2 assume !(1 == ~expectedDirection~0); 482209#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 482208#L2511-2 assume { :end_inline_timeShift } true; 482207#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 482204#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 482200#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 482199#L726-1 assume 0 == initPersonOnFloor_~floor#1; 482185#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 482164#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 482162#L518-2 assume !(0 == callOnFloor_~floorID#1); 482156#L521-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 482151#L530-5 assume { :end_inline_callOnFloor } true; 482149#L870-1 assume { :end_inline_initPersonOnFloor } true; 482148#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 482147#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 482145#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 482141#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 482138#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 482136#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 482134#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 482128#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 482106#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 482103#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 482101#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 482100#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 482099#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 482097#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 482089#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 482082#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 482041#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 482036#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 482034#L2479-9 assume !(1 == ~doorState~0); 482033#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 482015#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 482002#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 479811#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 479804#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 479797#L2206-9 assume !(1 == ~currentHeading~0); 479790#L2216-27 assume !(0 == ~currentFloorID~0); 479780#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 479754#L2222-19 assume { :end_inline_continueInDirection } true; 470141#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 470138#L228-3 assume !(-1 == ~expectedDirection~0); 470132#L240-3 assume !(1 == ~expectedDirection~0); 470127#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 470125#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 470123#L2988-2 [2022-07-22 02:29:34,739 INFO L754 eck$LassoCheckResult]: Loop: 470123#L2988-2 assume !false; 470122#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 470121#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 470120#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 470118#L2996 assume 1 != cleanup_~tmp___0~10#1; 470119#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 470619#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 470618#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 470616#L1734 assume !(0 != anyStopRequested_~tmp___3~1#1); 470614#L1738 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 470613#L455-85 assume !(0 == isFloorCalling_~floorID#1); 470607#L459-85 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 463920#L482-85 anyStopRequested_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret50#1;havoc anyStopRequested_#t~ret50#1; 463921#L1745 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 470587#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 470586#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 470585#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 470584#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 470583#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 470579#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 470573#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 470568#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 470553#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 470544#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 470536#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 470533#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 470532#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 470531#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 470530#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 470529#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 470524#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 470522#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 470521#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 470517#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 470513#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 470506#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 470489#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 470482#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 470463#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 470461#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 470233#L2206-12 assume !(1 == ~currentHeading~0); 470164#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 470155#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 470145#L2222-25 assume { :end_inline_continueInDirection } true; 470140#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 470135#L228-4 assume !(-1 == ~expectedDirection~0); 470129#L240-4 assume !(1 == ~expectedDirection~0); 470126#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 470124#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 470123#L2988-2 [2022-07-22 02:29:34,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:34,740 INFO L85 PathProgramCache]: Analyzing trace with hash 367298790, now seen corresponding path program 3 times [2022-07-22 02:29:34,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:34,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1920931035] [2022-07-22 02:29:34,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:34,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:34,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:34,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:34,776 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:34,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1920931035] [2022-07-22 02:29:34,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1920931035] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:34,776 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:34,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:34,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560436574] [2022-07-22 02:29:34,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:34,777 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:34,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:34,777 INFO L85 PathProgramCache]: Analyzing trace with hash -1744815904, now seen corresponding path program 1 times [2022-07-22 02:29:34,777 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:34,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [993732607] [2022-07-22 02:29:34,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:34,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:34,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:34,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:34,796 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:34,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [993732607] [2022-07-22 02:29:34,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [993732607] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:34,797 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:34,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:34,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [837064556] [2022-07-22 02:29:34,797 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:34,797 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:34,798 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:34,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:29:34,798 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:29:34,799 INFO L87 Difference]: Start difference. First operand 38599 states and 71327 transitions. cyclomatic complexity: 32729 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:35,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:35,426 INFO L93 Difference]: Finished difference Result 69563 states and 128453 transitions. [2022-07-22 02:29:35,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:29:35,427 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69563 states and 128453 transitions. [2022-07-22 02:29:35,856 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16432 [2022-07-22 02:29:36,038 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69563 states to 69563 states and 128453 transitions. [2022-07-22 02:29:36,038 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69563 [2022-07-22 02:29:36,080 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69563 [2022-07-22 02:29:36,081 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69563 states and 128453 transitions. [2022-07-22 02:29:36,115 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:36,115 INFO L369 hiAutomatonCegarLoop]: Abstraction has 69563 states and 128453 transitions. [2022-07-22 02:29:36,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69563 states and 128453 transitions. [2022-07-22 02:29:36,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69563 to 38651. [2022-07-22 02:29:36,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38651 states, 38651 states have (on average 1.8467568756306434) internal successors, (71379), 38650 states have internal predecessors, (71379), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:36,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38651 states to 38651 states and 71379 transitions. [2022-07-22 02:29:36,710 INFO L392 hiAutomatonCegarLoop]: Abstraction has 38651 states and 71379 transitions. [2022-07-22 02:29:36,710 INFO L374 stractBuchiCegarLoop]: Abstraction has 38651 states and 71379 transitions. [2022-07-22 02:29:36,710 INFO L287 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-07-22 02:29:36,710 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 38651 states and 71379 transitions. [2022-07-22 02:29:36,818 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8696 [2022-07-22 02:29:36,818 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:36,818 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:36,821 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:36,821 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:36,821 INFO L752 eck$LassoCheckResult]: Stem: 577524#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 577525#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 577408#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 574594#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 574595#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 575770#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 576330#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 576469#L448 assume { :end_inline_initFloors } true; 577668#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 572068#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 572069#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 573448#L726 assume 0 == initPersonOnFloor_~floor#1; 573449#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 572160#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 574313#L518 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 574314#L530-2 assume { :end_inline_callOnFloor } true; 579385#L870 assume { :end_inline_initPersonOnFloor } true; 579384#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 579383#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 579382#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 579381#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 578418#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 578201#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 572053#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 575613#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 572974#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 574625#L455 assume !(0 == isFloorCalling_~floorID#1); 574626#L459 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 574606#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 574886#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 574888#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 574939#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 573899#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 576674#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 578261#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 578700#L2388 assume !(0 != timeShift_~tmp___9~3#1); 574718#L2479 assume !(1 == ~doorState~0); 574719#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 576476#L1830 assume !(1 == stopRequestedInDirection_~dir#1); 576305#L1999 assume !(0 == ~currentFloorID~0); 572490#L2005 assume !(~currentFloorID~0 > 0); 572492#L2020 assume ~currentFloorID~0 > 0; 579443#L2022 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 579442#L2023 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 579330#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 578196#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 576969#L2206 assume !(1 == ~currentHeading~0); 575491#L2216 assume !(0 == ~currentFloorID~0); 575492#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 592526#L2222-1 assume { :end_inline_continueInDirection } true; 592523#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 592516#L228 assume !(-1 == ~expectedDirection~0); 592513#L240 assume !(1 == ~expectedDirection~0); 592505#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 590706#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 590705#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 590704#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 590702#L97-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 590700#L98-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 590701#L1643-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 592439#L1664-11 __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 592375#L102-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 590732#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 589901#L455-21 assume !(0 == isFloorCalling_~floorID#1); 589770#L459-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 589768#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 589764#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 578589#L1643-21 assume !(0 == buttonForFloorIsPressed_~floorID#1); 578590#L1647-21 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 589778#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 589766#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 589758#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 589759#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 578076#L2479-3 assume !(1 == ~doorState~0); 577315#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 574235#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 574236#L1999-2 assume !(0 == ~currentFloorID~0); 577815#L2005-2 assume !(~currentFloorID~0 > 0); 589902#L2020-2 assume ~currentFloorID~0 > 0; 589896#L2022-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 589784#L2023-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 589777#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 589776#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 589773#L2206-3 assume !(1 == ~currentHeading~0); 589775#L2216-9 assume !(0 == ~currentFloorID~0); 593304#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 578462#L2222-7 assume { :end_inline_continueInDirection } true; 576453#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 575071#L228-1 assume !(-1 == ~expectedDirection~0); 575072#L240-1 assume !(1 == ~expectedDirection~0); 576912#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 578160#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 582644#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 582643#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 582640#L97-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 582641#L98-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 582642#L1643-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 586814#L1664-22 __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 586801#L102-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 582665#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 586791#L455-42 assume !(0 == isFloorCalling_~floorID#1); 582613#L459-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 586787#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 586786#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 586785#L1643-32 assume !(0 == buttonForFloorIsPressed_~floorID#1); 586783#L1647-32 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 586780#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 586778#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 586777#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 586775#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 586774#L2479-6 assume !(1 == ~doorState~0); 586773#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 586772#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 586770#L1999-4 assume !(0 == ~currentFloorID~0); 586766#L2005-4 assume !(~currentFloorID~0 > 0); 577850#L2020-4 assume ~currentFloorID~0 > 0; 577852#L2022-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 578279#L2023-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 577486#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 589648#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 589722#L2206-6 assume !(1 == ~currentHeading~0); 578669#L2216-18 assume !(0 == ~currentFloorID~0); 573633#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 576927#L2222-13 assume { :end_inline_continueInDirection } true; 574589#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 574467#L228-2 assume !(-1 == ~expectedDirection~0); 572967#L240-2 assume !(1 == ~expectedDirection~0); 572968#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 576506#L2511-2 assume { :end_inline_timeShift } true; 577084#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 577175#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 575552#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 577089#L726-1 assume 0 == initPersonOnFloor_~floor#1; 576997#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 572327#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 577224#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 572830#L530-5 assume { :end_inline_callOnFloor } true; 574689#L870-1 assume { :end_inline_initPersonOnFloor } true; 574690#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 602891#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 602890#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 602888#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 602887#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 602884#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 602880#L1664-38 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 602855#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 593775#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 577953#L455-63 assume !(0 == isFloorCalling_~floorID#1); 576294#L459-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 576295#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 593688#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 576637#L1643-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 575409#L1647-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 572187#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 601645#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 593771#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 593699#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 577706#L2479-9 assume !(1 == ~doorState~0); 577707#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 609864#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 576787#L1999-6 assume !(0 == ~currentFloorID~0); 576788#L2005-6 assume !(~currentFloorID~0 > 0); 575748#L2020-6 assume ~currentFloorID~0 > 0; 575750#L2022-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 575677#L2023-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 572093#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 593701#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 593703#L2206-9 assume !(1 == ~currentHeading~0); 574837#L2216-27 assume !(0 == ~currentFloorID~0); 574838#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 577372#L2222-19 assume { :end_inline_continueInDirection } true; 573263#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 573486#L228-3 assume !(-1 == ~expectedDirection~0); 573487#L240-3 assume !(1 == ~expectedDirection~0); 609831#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 609827#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 609822#L2988-2 [2022-07-22 02:29:36,822 INFO L754 eck$LassoCheckResult]: Loop: 609822#L2988-2 assume !false; 609820#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 609817#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 609815#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 609813#L2996 assume 1 != cleanup_~tmp___0~10#1; 609811#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 609809#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 609808#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 608511#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 608510#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 608509#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 608508#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 602789#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 602790#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 602780#L97-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 602761#L98-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 602750#L1643-44 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 602747#L1664-44 __utac_acc__Specification3_spec__1_#t~ret6#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret6#1;havoc __utac_acc__Specification3_spec__1_#t~ret6#1; 602736#L102-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 602729#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 595953#L455-89 assume !(0 == isFloorCalling_~floorID#1); 595949#L459-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 595948#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 595939#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 595940#L1643-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 595944#L1647-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 595943#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 595941#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 595942#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 595931#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 587580#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 587581#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 610220#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 610219#L1999-8 assume !(0 == ~currentFloorID~0); 610218#L2005-8 assume !(~currentFloorID~0 > 0); 572891#L2020-8 assume ~currentFloorID~0 > 0; 610215#L2022-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 575198#L2023-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 572175#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 587380#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 576598#L2206-12 assume !(1 == ~currentHeading~0); 576599#L2216-36 assume !(0 == ~currentFloorID~0); 578095#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 578096#L2222-25 assume { :end_inline_continueInDirection } true; 610452#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 610451#L228-4 assume !(-1 == ~expectedDirection~0); 610449#L240-4 assume !(1 == ~expectedDirection~0); 610447#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 609826#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 609822#L2988-2 [2022-07-22 02:29:36,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:36,822 INFO L85 PathProgramCache]: Analyzing trace with hash -1539131352, now seen corresponding path program 1 times [2022-07-22 02:29:36,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:36,823 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559924192] [2022-07-22 02:29:36,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:36,823 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:36,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:36,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:36,871 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:36,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559924192] [2022-07-22 02:29:36,871 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559924192] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:36,872 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:36,872 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:36,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1137079566] [2022-07-22 02:29:36,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:36,873 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:36,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:36,874 INFO L85 PathProgramCache]: Analyzing trace with hash 1407413381, now seen corresponding path program 1 times [2022-07-22 02:29:36,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:36,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [542827268] [2022-07-22 02:29:36,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:36,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:36,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:36,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:36,914 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:36,914 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [542827268] [2022-07-22 02:29:36,914 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [542827268] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:36,914 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:36,914 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 02:29:36,914 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [545071412] [2022-07-22 02:29:36,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:36,915 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:36,915 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:36,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 02:29:36,916 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 02:29:36,916 INFO L87 Difference]: Start difference. First operand 38651 states and 71379 transitions. cyclomatic complexity: 32729 Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 6 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:40,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:40,346 INFO L93 Difference]: Finished difference Result 76745 states and 141189 transitions. [2022-07-22 02:29:40,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-22 02:29:40,347 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 76745 states and 141189 transitions. [2022-07-22 02:29:40,725 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17770 [2022-07-22 02:29:40,922 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 76745 states to 76745 states and 141189 transitions. [2022-07-22 02:29:40,922 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 76745 [2022-07-22 02:29:40,974 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 76745 [2022-07-22 02:29:40,974 INFO L73 IsDeterministic]: Start isDeterministic. Operand 76745 states and 141189 transitions. [2022-07-22 02:29:41,018 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:41,018 INFO L369 hiAutomatonCegarLoop]: Abstraction has 76745 states and 141189 transitions. [2022-07-22 02:29:41,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76745 states and 141189 transitions. [2022-07-22 02:29:41,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76745 to 53615. [2022-07-22 02:29:41,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53615 states, 53615 states have (on average 1.843271472535671) internal successors, (98827), 53614 states have internal predecessors, (98827), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:41,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53615 states to 53615 states and 98827 transitions. [2022-07-22 02:29:41,836 INFO L392 hiAutomatonCegarLoop]: Abstraction has 53615 states and 98827 transitions. [2022-07-22 02:29:41,837 INFO L374 stractBuchiCegarLoop]: Abstraction has 53615 states and 98827 transitions. [2022-07-22 02:29:41,837 INFO L287 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-07-22 02:29:41,837 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53615 states and 98827 transitions. [2022-07-22 02:29:41,996 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12468 [2022-07-22 02:29:41,997 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:41,997 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:41,999 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:41,999 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:41,999 INFO L752 eck$LassoCheckResult]: Stem: 692979#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 692980#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 692863#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 690018#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 690019#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 691203#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 691758#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 691906#L448 assume { :end_inline_initFloors } true; 693130#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 687491#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 687492#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 688857#L726 assume 0 == initPersonOnFloor_~floor#1; 688858#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 687583#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 689730#L518 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 689731#L530-2 assume { :end_inline_callOnFloor } true; 711392#L870 assume { :end_inline_initPersonOnFloor } true; 711391#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 711390#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 711389#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 711387#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 711388#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 711408#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 691052#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 691053#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 693294#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 693295#L455 assume !(0 == isFloorCalling_~floorID#1); 690935#L459 assume !(1 == isFloorCalling_~floorID#1); 690936#L463 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 690755#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 690756#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 690356#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 690357#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 692102#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 692103#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 694154#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 694155#L2388 assume !(0 != timeShift_~tmp___9~3#1); 690139#L2479 assume !(1 == ~doorState~0); 690140#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 691910#L1830 assume !(1 == stopRequestedInDirection_~dir#1); 691911#L1999 assume !(0 == ~currentFloorID~0); 687908#L2005 assume !(~currentFloorID~0 > 0); 687910#L2020 assume ~currentFloorID~0 > 0; 693250#L2022 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 693251#L2023 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 711356#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 711354#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 711353#L2206 assume !(1 == ~currentHeading~0); 711351#L2216 assume !(0 == ~currentFloorID~0); 711349#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 711348#L2222-1 assume { :end_inline_continueInDirection } true; 711345#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 711343#L228 assume !(-1 == ~expectedDirection~0); 711340#L240 assume !(1 == ~expectedDirection~0); 711337#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 711336#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 711335#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 711334#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 711332#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 711326#L159-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 690215#L1643-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 687335#L1664-16 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 691935#L163-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 689804#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 739251#L455-21 assume !(0 == isFloorCalling_~floorID#1); 692489#L459-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 688317#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 687679#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 687681#L1643-21 assume !(0 == buttonForFloorIsPressed_~floorID#1); 688829#L1647-21 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 688457#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 690749#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 692505#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 739261#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 693552#L2479-3 assume !(1 == ~doorState~0); 692766#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 689646#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 689647#L1999-2 assume !(0 == ~currentFloorID~0); 690106#L2005-2 assume !(~currentFloorID~0 > 0); 690108#L2020-2 assume ~currentFloorID~0 > 0; 739713#L2022-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 693173#L2023-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 688258#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 740915#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 693037#L2206-3 assume !(1 == ~currentHeading~0); 689485#L2216-9 assume !(0 == ~currentFloorID~0); 688092#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 688093#L2222-7 assume { :end_inline_continueInDirection } true; 692601#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 715642#L228-1 assume !(-1 == ~expectedDirection~0); 714073#L240-1 assume !(1 == ~expectedDirection~0); 714063#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 714062#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 714061#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 714060#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 714003#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 709369#L159-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 688855#L1643-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 729826#L1664-27 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 729825#L163-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 692757#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 740047#L455-42 assume !(0 == isFloorCalling_~floorID#1); 740045#L459-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 740041#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 740037#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 740039#L1643-32 assume !(0 == buttonForFloorIsPressed_~floorID#1); 740050#L1647-32 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 740042#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 740040#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 740035#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 740036#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 691179#L2479-6 assume !(1 == ~doorState~0); 691180#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 693136#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 690160#L1999-4 assume !(0 == ~currentFloorID~0); 690161#L2005-4 assume !(~currentFloorID~0 > 0); 740438#L2020-4 assume ~currentFloorID~0 > 0; 740769#L2022-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 693735#L2023-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 688165#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 740428#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 740427#L2206-6 assume !(1 == ~currentHeading~0); 694130#L2216-18 assume !(0 == ~currentFloorID~0); 689041#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 690096#L2222-13 assume { :end_inline_continueInDirection } true; 690013#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 711988#L228-2 assume !(-1 == ~expectedDirection~0); 711984#L240-2 assume !(1 == ~expectedDirection~0); 711982#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 711981#L2511-2 assume { :end_inline_timeShift } true; 711980#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 711977#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 711973#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 711971#L726-1 assume 0 == initPersonOnFloor_~floor#1; 711931#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 711905#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 705709#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 705703#L530-5 assume { :end_inline_callOnFloor } true; 705695#L870-1 assume { :end_inline_initPersonOnFloor } true; 705693#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 705691#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 705689#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 705686#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 705683#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 705684#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 736555#L1664-38 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 736554#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 688539#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 739672#L455-63 assume !(0 == isFloorCalling_~floorID#1); 739669#L459-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 739667#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 739666#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 739665#L1643-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 739662#L1647-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 739660#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 739658#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 739657#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 739656#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 739655#L2479-9 assume !(1 == ~doorState~0); 739654#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 739653#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 739652#L1999-6 assume !(0 == ~currentFloorID~0); 739650#L2005-6 assume !(~currentFloorID~0 > 0); 739569#L2020-6 assume ~currentFloorID~0 > 0; 739715#L2022-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 739550#L2023-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 739541#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 739539#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 739419#L2206-9 assume !(1 == ~currentHeading~0); 739413#L2216-27 assume !(0 == ~currentFloorID~0); 709581#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 709567#L2222-19 assume { :end_inline_continueInDirection } true; 709561#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 709556#L228-3 assume !(-1 == ~expectedDirection~0); 709550#L240-3 assume !(1 == ~expectedDirection~0); 709547#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 709546#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 709544#L2988-2 [2022-07-22 02:29:42,000 INFO L754 eck$LassoCheckResult]: Loop: 709544#L2988-2 assume !false; 709543#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 709542#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 705994#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 705929#L2996 assume 1 != cleanup_~tmp___0~10#1; 705924#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 705923#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 705922#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 705921#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 694169#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 705911#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 705899#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 705649#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 705648#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 705645#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 705599#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 705600#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 737559#L1664-49 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 737556#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 737557#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 740289#L455-89 assume !(0 == isFloorCalling_~floorID#1); 740288#L459-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 692893#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 740295#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 687818#L1643-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 687819#L1647-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 740300#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 740297#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 693589#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 693590#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 740729#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 740727#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 740725#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 740723#L1999-8 assume !(0 == ~currentFloorID~0); 740722#L2005-8 assume !(~currentFloorID~0 > 0); 688301#L2020-8 assume ~currentFloorID~0 > 0; 740731#L2022-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 690624#L2023-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 687598#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 740914#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 692032#L2206-12 assume !(1 == ~currentHeading~0); 692033#L2216-36 assume !(0 == ~currentFloorID~0); 692610#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 711891#L2222-25 assume { :end_inline_continueInDirection } true; 709562#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 709559#L228-4 assume !(-1 == ~expectedDirection~0); 709553#L240-4 assume !(1 == ~expectedDirection~0); 709548#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 709545#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 709544#L2988-2 [2022-07-22 02:29:42,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:42,001 INFO L85 PathProgramCache]: Analyzing trace with hash 1603925197, now seen corresponding path program 1 times [2022-07-22 02:29:42,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:42,001 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1260588679] [2022-07-22 02:29:42,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:42,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:42,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:42,049 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:42,050 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:42,050 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1260588679] [2022-07-22 02:29:42,050 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1260588679] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:42,050 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:42,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:42,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1946291326] [2022-07-22 02:29:42,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:42,051 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:42,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:42,052 INFO L85 PathProgramCache]: Analyzing trace with hash 1030214986, now seen corresponding path program 1 times [2022-07-22 02:29:42,052 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:42,052 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1305644312] [2022-07-22 02:29:42,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:42,052 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:42,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:42,070 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:42,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:42,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1305644312] [2022-07-22 02:29:42,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1305644312] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:42,071 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:42,071 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:29:42,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [943705334] [2022-07-22 02:29:42,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:42,072 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:42,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:42,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:29:42,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:29:42,073 INFO L87 Difference]: Start difference. First operand 53615 states and 98827 transitions. cyclomatic complexity: 45213 Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:43,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:43,410 INFO L93 Difference]: Finished difference Result 100923 states and 185531 transitions. [2022-07-22 02:29:43,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:29:43,411 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 100923 states and 185531 transitions. [2022-07-22 02:29:44,147 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24244 [2022-07-22 02:29:44,441 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 100923 states to 100923 states and 185531 transitions. [2022-07-22 02:29:44,441 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 100923 [2022-07-22 02:29:44,523 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 100923 [2022-07-22 02:29:44,523 INFO L73 IsDeterministic]: Start isDeterministic. Operand 100923 states and 185531 transitions. [2022-07-22 02:29:44,581 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:44,581 INFO L369 hiAutomatonCegarLoop]: Abstraction has 100923 states and 185531 transitions. [2022-07-22 02:29:44,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100923 states and 185531 transitions. [2022-07-22 02:29:45,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100923 to 100923. [2022-07-22 02:29:45,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100923 states, 100923 states have (on average 1.8383421023948952) internal successors, (185531), 100922 states have internal predecessors, (185531), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:46,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100923 states to 100923 states and 185531 transitions. [2022-07-22 02:29:46,110 INFO L392 hiAutomatonCegarLoop]: Abstraction has 100923 states and 185531 transitions. [2022-07-22 02:29:46,110 INFO L374 stractBuchiCegarLoop]: Abstraction has 100923 states and 185531 transitions. [2022-07-22 02:29:46,110 INFO L287 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-07-22 02:29:46,110 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100923 states and 185531 transitions. [2022-07-22 02:29:46,401 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24244 [2022-07-22 02:29:46,401 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:46,401 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:46,403 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:46,403 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:46,404 INFO L752 eck$LassoCheckResult]: Stem: 847487#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 847488#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 847374#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 844554#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 844555#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 845735#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 846288#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 846433#L448 assume { :end_inline_initFloors } true; 847644#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 842037#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 842038#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 843409#L726 assume 0 == initPersonOnFloor_~floor#1; 843410#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 842131#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 844272#L518 assume !(0 == callOnFloor_~floorID#1); 844274#L521 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 845185#L530-2 assume { :end_inline_callOnFloor } true; 845186#L870 assume { :end_inline_initPersonOnFloor } true; 847854#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 847855#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 842625#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 842626#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 844771#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 848178#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 842022#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 845582#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 842939#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 844586#L455 assume !(0 == isFloorCalling_~floorID#1); 844587#L459 assume !(1 == isFloorCalling_~floorID#1); 845466#L463 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 844568#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 844845#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 844847#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 844896#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 843861#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 846627#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 848233#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 848662#L2388 assume !(0 != timeShift_~tmp___9~3#1); 844676#L2479 assume !(1 == ~doorState~0); 844677#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 846437#L1830 assume !(1 == stopRequestedInDirection_~dir#1); 846262#L1999 assume !(0 == ~currentFloorID~0); 842455#L2005 assume ~currentFloorID~0 > 0; 842456#L2006 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 847923#L455-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 848573#L482-6 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 848574#L2010 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 855320#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 855297#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 855295#L2206 assume !(1 == ~currentHeading~0); 855285#L2216 assume !(0 == ~currentFloorID~0); 855280#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 855277#L2222-1 assume { :end_inline_continueInDirection } true; 855274#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 855272#L228 assume !(-1 == ~expectedDirection~0); 855265#L240 assume !(1 == ~expectedDirection~0); 855262#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 855261#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 855260#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 855258#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 855254#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 855251#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 855249#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 855247#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 855241#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 855236#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 855230#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 855228#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 855227#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 855226#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 854266#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 854261#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 854259#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 854257#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 854255#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 854251#L2479-3 assume !(1 == ~doorState~0); 854249#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 854246#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 853712#L1999-2 assume !(0 == ~currentFloorID~0); 848837#L2005-2 assume ~currentFloorID~0 > 0; 853812#L2006-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 853813#L455-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 848831#L482-27 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 848832#L2010-2 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 853465#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 853462#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 853461#L2206-3 assume !(1 == ~currentHeading~0); 853458#L2216-9 assume !(0 == ~currentFloorID~0); 853439#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 853426#L2222-7 assume { :end_inline_continueInDirection } true; 853417#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 853410#L228-1 assume !(-1 == ~expectedDirection~0); 853406#L240-1 assume !(1 == ~expectedDirection~0); 853403#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 853401#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 853398#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 853397#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 853395#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 853393#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 852153#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 852148#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 852145#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 852110#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 852070#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 852065#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 850374#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 850373#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 850370#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 850365#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 850362#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 849535#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 849529#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 849527#L2479-6 assume !(1 == ~doorState~0); 849524#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 849521#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 849462#L1999-4 assume !(0 == ~currentFloorID~0); 849463#L2005-4 assume ~currentFloorID~0 > 0; 851743#L2006-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 851744#L455-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 852046#L482-48 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 850397#L2010-4 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 849710#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 849270#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 849250#L2206-6 assume !(1 == ~currentHeading~0); 849113#L2216-18 assume !(0 == ~currentFloorID~0); 849095#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 849080#L2222-13 assume { :end_inline_continueInDirection } true; 849075#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 849073#L228-2 assume !(-1 == ~expectedDirection~0); 849070#L240-2 assume !(1 == ~expectedDirection~0); 849068#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 849067#L2511-2 assume { :end_inline_timeShift } true; 849065#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 849066#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 871124#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 871123#L726-1 assume 0 == initPersonOnFloor_~floor#1; 849038#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 849018#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 849012#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 849013#L530-5 assume { :end_inline_callOnFloor } true; 899284#L870-1 assume { :end_inline_initPersonOnFloor } true; 899283#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 899282#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 899281#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 899279#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 899280#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 871067#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 871058#L1664-38 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 871048#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 871047#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 871046#L455-63 assume !(0 == isFloorCalling_~floorID#1); 871041#L459-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 871042#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 912446#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 912447#L1643-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 848934#L1647-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 848931#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 848926#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 848922#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 848923#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 848707#L2479-9 assume !(1 == ~doorState~0); 848706#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 848703#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 848704#L1999-6 assume !(0 == ~currentFloorID~0); 892399#L2005-6 assume ~currentFloorID~0 > 0; 892398#L2006-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 848701#L455-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 848697#L482-69 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 848698#L2010-6 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 881565#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 881566#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 910219#L2206-9 assume !(1 == ~currentHeading~0); 913843#L2216-27 assume !(0 == ~currentFloorID~0); 913840#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 846144#L2222-19 assume { :end_inline_continueInDirection } true; 913838#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 913833#L228-3 assume !(-1 == ~expectedDirection~0); 913827#L240-3 assume !(1 == ~expectedDirection~0); 913824#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 913823#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 913821#L2988-2 [2022-07-22 02:29:46,404 INFO L754 eck$LassoCheckResult]: Loop: 913821#L2988-2 assume !false; 913820#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 913819#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 913818#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 913817#L2996 assume 1 != cleanup_~tmp___0~10#1; 913816#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 913815#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 913814#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 913813#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 907557#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 913812#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 913811#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 913810#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 913809#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 913807#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 913808#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 904204#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 904200#L1664-49 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 904162#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 904161#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 904160#L455-89 assume !(0 == isFloorCalling_~floorID#1); 904156#L459-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 904155#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 904147#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 904148#L1643-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 904151#L1647-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 904150#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 904149#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 904146#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 904142#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 904143#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 907211#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 907208#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 848820#L1999-8 assume !(0 == ~currentFloorID~0); 848818#L2005-8 assume ~currentFloorID~0 > 0; 848817#L2006-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 848096#L455-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 848097#L482-95 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 848815#L2010-8 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 848816#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 913849#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 913847#L2206-12 assume !(1 == ~currentHeading~0); 913845#L2216-36 assume !(0 == ~currentFloorID~0); 913841#L2216-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 848076#L2222-25 assume { :end_inline_continueInDirection } true; 913839#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 913836#L228-4 assume !(-1 == ~expectedDirection~0); 913830#L240-4 assume !(1 == ~expectedDirection~0); 913825#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 913822#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 913821#L2988-2 [2022-07-22 02:29:46,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:46,405 INFO L85 PathProgramCache]: Analyzing trace with hash 424111137, now seen corresponding path program 1 times [2022-07-22 02:29:46,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:46,406 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1360915422] [2022-07-22 02:29:46,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:46,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:46,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:46,447 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:46,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:46,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1360915422] [2022-07-22 02:29:46,448 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1360915422] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:46,448 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:46,448 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:46,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140924419] [2022-07-22 02:29:46,449 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:46,449 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:46,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:46,450 INFO L85 PathProgramCache]: Analyzing trace with hash -178815432, now seen corresponding path program 1 times [2022-07-22 02:29:46,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:46,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [221660380] [2022-07-22 02:29:46,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:46,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:46,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:46,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:46,476 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:46,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [221660380] [2022-07-22 02:29:46,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [221660380] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:46,477 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:46,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:29:46,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714590766] [2022-07-22 02:29:46,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:46,477 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:46,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:46,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:29:46,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:29:46,478 INFO L87 Difference]: Start difference. First operand 100923 states and 185531 transitions. cyclomatic complexity: 84609 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:47,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:47,660 INFO L93 Difference]: Finished difference Result 150839 states and 275963 transitions. [2022-07-22 02:29:47,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 02:29:47,661 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 150839 states and 275963 transitions. [2022-07-22 02:29:48,557 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36812 [2022-07-22 02:29:48,910 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 150839 states to 150839 states and 275963 transitions. [2022-07-22 02:29:48,910 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 150839 [2022-07-22 02:29:48,995 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 150839 [2022-07-22 02:29:48,996 INFO L73 IsDeterministic]: Start isDeterministic. Operand 150839 states and 275963 transitions. [2022-07-22 02:29:49,062 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:49,063 INFO L369 hiAutomatonCegarLoop]: Abstraction has 150839 states and 275963 transitions. [2022-07-22 02:29:49,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150839 states and 275963 transitions. [2022-07-22 02:29:50,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150839 to 148111. [2022-07-22 02:29:50,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148111 states, 148111 states have (on average 1.8347793209147194) internal successors, (271751), 148110 states have internal predecessors, (271751), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:51,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148111 states to 148111 states and 271751 transitions. [2022-07-22 02:29:51,013 INFO L392 hiAutomatonCegarLoop]: Abstraction has 148111 states and 271751 transitions. [2022-07-22 02:29:51,013 INFO L374 stractBuchiCegarLoop]: Abstraction has 148111 states and 271751 transitions. [2022-07-22 02:29:51,013 INFO L287 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-07-22 02:29:51,013 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 148111 states and 271751 transitions. [2022-07-22 02:29:51,440 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36100 [2022-07-22 02:29:51,440 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:51,440 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:51,442 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:51,442 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:51,443 INFO L752 eck$LassoCheckResult]: Stem: 1099227#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1099228#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1099115#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1096306#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1096307#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 1097475#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1098027#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1098177#L448 assume { :end_inline_initFloors } true; 1099381#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1093818#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1093819#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1095175#L726 assume 0 == initPersonOnFloor_~floor#1; 1095176#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1093909#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1096029#L518 assume !(0 == callOnFloor_~floorID#1); 1096031#L521 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1098287#L530-2 assume { :end_inline_callOnFloor } true; 1144803#L870 assume { :end_inline_initPersonOnFloor } true; 1144802#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1144801#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1144800#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1144799#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1144797#L159 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1144798#L1643-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1144804#L1664-5 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 1144757#L163 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1144753#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1144752#L455 assume !(0 == isFloorCalling_~floorID#1); 1144751#L459 assume !(1 == isFloorCalling_~floorID#1); 1144749#L463 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1144747#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1144746#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1144745#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1144741#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1144740#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1144738#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1144737#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1144735#L2388 assume !(0 != timeShift_~tmp___9~3#1); 1144734#L2479 assume !(1 == ~doorState~0); 1144733#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1144732#L1830 assume !(1 == stopRequestedInDirection_~dir#1); 1144731#L1999 assume !(0 == ~currentFloorID~0); 1144729#L2005 assume ~currentFloorID~0 > 0; 1144728#L2006 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1144727#L455-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1144726#L482-6 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1100273#L2010 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1095574#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1100477#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1144656#L2206 assume !(1 == ~currentHeading~0); 1147972#L2216 assume !(0 == ~currentFloorID~0); 1147968#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1147966#L2222-1 assume { :end_inline_continueInDirection } true; 1147963#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1147961#L228 assume !(-1 == ~expectedDirection~0); 1147956#L240 assume !(1 == ~expectedDirection~0); 1147953#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1147951#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1147949#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1147947#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1147945#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1128326#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1147938#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1147935#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1147931#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1147927#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1147925#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1147921#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1147919#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1147917#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1147911#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1147905#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1147901#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1147899#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1147895#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 1147893#L2479-3 assume !(1 == ~doorState~0); 1147891#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1147886#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 1147887#L1999-2 assume !(0 == ~currentFloorID~0); 1100606#L2005-2 assume ~currentFloorID~0 > 0; 1100607#L2006-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1154301#L455-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1100604#L482-27 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1100605#L2010-2 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1154216#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1241739#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1099287#L2206-3 assume !(1 == ~currentHeading~0); 1095794#L2216-9 assume !(0 == ~currentFloorID~0); 1094417#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1094418#L2222-7 assume { :end_inline_continueInDirection } true; 1098158#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1096772#L228-1 assume !(-1 == ~expectedDirection~0); 1096773#L240-1 assume !(1 == ~expectedDirection~0); 1098615#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1099878#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1146054#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1145712#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1145713#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1125715#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1145702#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1145698#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1145694#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1145690#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1145687#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1145684#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1145681#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1145679#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1145675#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1145667#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1145664#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1145661#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1145658#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 1145655#L2479-6 assume !(1 == ~doorState~0); 1145653#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1145649#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 1145650#L1999-4 assume !(0 == ~currentFloorID~0); 1145797#L2005-4 assume ~currentFloorID~0 > 0; 1153461#L2006-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1100581#L455-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1100582#L482-48 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1100572#L2010-4 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1100573#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1237956#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1237955#L2206-6 assume !(1 == ~currentHeading~0); 1237954#L2216-18 assume !(0 == ~currentFloorID~0); 1237950#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1237938#L2222-13 assume { :end_inline_continueInDirection } true; 1237935#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1237933#L228-2 assume !(-1 == ~expectedDirection~0); 1237930#L240-2 assume !(1 == ~expectedDirection~0); 1237928#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1237927#L2511-2 assume { :end_inline_timeShift } true; 1237926#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1237923#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1237919#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1237918#L726-1 assume 0 == initPersonOnFloor_~floor#1; 1237901#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1237879#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1237877#L518-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1237878#L530-5 assume { :end_inline_callOnFloor } true; 1241388#L870-1 assume { :end_inline_initPersonOnFloor } true; 1236981#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1236134#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1236132#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1236130#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1118804#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1197625#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1197619#L1664-38 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 1197613#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1197612#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1197611#L455-63 assume !(0 == isFloorCalling_~floorID#1); 1197608#L459-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1197606#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1197605#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1197604#L1643-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1197601#L1647-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1197599#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1197597#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1197591#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1197588#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 1197589#L2479-9 assume !(1 == ~doorState~0); 1239216#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1239214#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 1239213#L1999-6 assume !(0 == ~currentFloorID~0); 1239211#L2005-6 assume ~currentFloorID~0 > 0; 1239209#L2006-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1239210#L455-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1100631#L482-69 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1100632#L2010-6 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1239208#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1239231#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1241661#L2206-9 assume !(1 == ~currentHeading~0); 1148055#L2216-27 assume !(0 == ~currentFloorID~0); 1097885#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1097886#L2222-19 assume { :end_inline_continueInDirection } true; 1094993#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1095212#L228-3 assume !(-1 == ~expectedDirection~0); 1095213#L240-3 assume !(1 == ~expectedDirection~0); 1098928#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1241690#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1241674#L2988-2 [2022-07-22 02:29:51,444 INFO L754 eck$LassoCheckResult]: Loop: 1241674#L2988-2 assume !false; 1241673#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1241666#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1241665#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1241664#L2996 assume 1 != cleanup_~tmp___0~10#1; 1100148#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1097468#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1097469#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 1100300#L1734 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1238760#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1237794#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 1219514#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1190435#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1190433#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1190431#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1110028#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1154408#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1154402#L1664-49 __utac_acc__Specification3_spec__1_#t~ret11#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret11#1;havoc __utac_acc__Specification3_spec__1_#t~ret11#1; 1154398#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1154397#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1154396#L455-89 assume !(0 == isFloorCalling_~floorID#1); 1154390#L459-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1154391#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1198168#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1198167#L1643-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1198163#L1647-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1198162#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1198160#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1198159#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1198158#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 1100563#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1100558#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1100559#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 1100554#L1999-8 assume !(0 == ~currentFloorID~0); 1100553#L2005-8 assume ~currentFloorID~0 > 0; 1100549#L2006-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1100550#L455-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1100990#L482-95 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1100991#L2010-8 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1153783#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1153784#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1098309#L2206-12 assume !(1 == ~currentHeading~0); 1098310#L2216-36 assume !(0 == ~currentFloorID~0); 1099810#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1099811#L2222-25 assume { :end_inline_continueInDirection } true; 1099751#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1099886#L228-4 assume !(-1 == ~expectedDirection~0); 1241734#L240-4 assume !(1 == ~expectedDirection~0); 1097576#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1097577#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1241674#L2988-2 [2022-07-22 02:29:51,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:51,444 INFO L85 PathProgramCache]: Analyzing trace with hash 424111137, now seen corresponding path program 2 times [2022-07-22 02:29:51,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:51,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [258996566] [2022-07-22 02:29:51,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:51,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:51,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:51,493 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:51,494 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:51,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [258996566] [2022-07-22 02:29:51,494 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [258996566] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:51,494 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:51,494 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:51,495 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1261351289] [2022-07-22 02:29:51,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:51,495 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:51,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:51,496 INFO L85 PathProgramCache]: Analyzing trace with hash 1596191930, now seen corresponding path program 1 times [2022-07-22 02:29:51,496 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:51,496 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [81803878] [2022-07-22 02:29:51,496 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:51,496 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:51,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:51,515 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:51,515 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:51,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [81803878] [2022-07-22 02:29:51,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [81803878] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:51,516 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:51,516 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:29:51,516 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796776183] [2022-07-22 02:29:51,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:51,516 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:51,516 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:51,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:29:51,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:29:51,517 INFO L87 Difference]: Start difference. First operand 148111 states and 271751 transitions. cyclomatic complexity: 123641 Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:52,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:52,773 INFO L93 Difference]: Finished difference Result 216401 states and 396613 transitions. [2022-07-22 02:29:52,774 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:29:52,774 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 216401 states and 396613 transitions. [2022-07-22 02:29:54,303 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 52256 [2022-07-22 02:29:55,504 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 216401 states to 216401 states and 396613 transitions. [2022-07-22 02:29:55,505 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 216401 [2022-07-22 02:29:55,584 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 216401 [2022-07-22 02:29:55,584 INFO L73 IsDeterministic]: Start isDeterministic. Operand 216401 states and 396613 transitions. [2022-07-22 02:29:55,663 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:55,663 INFO L369 hiAutomatonCegarLoop]: Abstraction has 216401 states and 396613 transitions. [2022-07-22 02:29:55,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 216401 states and 396613 transitions. [2022-07-22 02:29:57,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 216401 to 212505. [2022-07-22 02:29:57,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212505 states, 212505 states have (on average 1.8362909108020988) internal successors, (390221), 212504 states have internal predecessors, (390221), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:58,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212505 states to 212505 states and 390221 transitions. [2022-07-22 02:29:58,782 INFO L392 hiAutomatonCegarLoop]: Abstraction has 212505 states and 390221 transitions. [2022-07-22 02:29:58,782 INFO L374 stractBuchiCegarLoop]: Abstraction has 212505 states and 390221 transitions. [2022-07-22 02:29:58,782 INFO L287 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-07-22 02:29:58,782 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 212505 states and 390221 transitions. [2022-07-22 02:29:59,314 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 51176 [2022-07-22 02:29:59,314 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:59,314 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:59,316 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:59,316 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:59,316 INFO L752 eck$LassoCheckResult]: Stem: 1463756#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1463757#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret131#1, main_~retValue_acc~20#1, main_~tmp~25#1;havoc main_~retValue_acc~20#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1463642#L3336 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1460826#L3329 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1460827#L3344 main_#t~ret131#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret131#1;havoc main_#t~ret131#1; 1462000#L3182 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1462557#L3156 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1462711#L448 assume { :end_inline_initFloors } true; 1463914#L1442 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1458337#L3239 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1458338#L3264 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1459692#L726 assume 0 == initPersonOnFloor_~floor#1; 1459693#L727 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1458424#L834-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1460544#L518 assume !(0 == callOnFloor_~floorID#1); 1460546#L521 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1461453#L530-2 assume { :end_inline_callOnFloor } true; 1461454#L870 assume { :end_inline_initPersonOnFloor } true; 1464136#L2906 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1464137#L1626 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1458910#L1678 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1458911#L97 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1461038#L159 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1462081#L169 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1463006#L180 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1462826#L191 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1459675#L202 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1459677#L203 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1464085#L455 assume !(0 == isFloorCalling_~floorID#1); 1461733#L459 assume !(1 == isFloorCalling_~floorID#1); 1461734#L463 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1461546#L482 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1461547#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1461164#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1461165#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1462906#L1664-10 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1462907#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1464970#L2251 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1464971#L2388 assume !(0 != timeShift_~tmp___9~3#1); 1460943#L2479 assume !(1 == ~doorState~0); 1460944#L2479-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1462715#L1830 assume !(1 == stopRequestedInDirection_~dir#1); 1462716#L1999 assume !(0 == ~currentFloorID~0); 1458747#L2005 assume ~currentFloorID~0 > 0; 1458748#L2006 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1465162#L455-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1464872#L482-6 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1464873#L2010 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1465161#L2152 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1495251#L2487 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1495249#L2206 assume !(1 == ~currentHeading~0); 1495247#L2216 assume !(0 == ~currentFloorID~0); 1495245#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1495228#L2222-1 assume { :end_inline_continueInDirection } true; 1495214#L2496-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1495203#L228 assume !(-1 == ~expectedDirection~0); 1495195#L240 assume !(1 == ~expectedDirection~0); 1495056#L241 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1483500#L2511 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1483498#L1626-1 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1483496#L1678-3 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1483493#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1466042#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1483489#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1483486#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1483484#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1483481#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1483479#L203-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1483476#L455-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1483472#L482-21 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1483470#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1482952#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1482946#L1664-21 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1482943#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1482940#L2251-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1482937#L2388-2 assume !(0 != timeShift_~tmp___9~3#1); 1482934#L2479-3 assume !(1 == ~doorState~0); 1482932#L2479-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1482929#L1830-2 assume !(1 == stopRequestedInDirection_~dir#1); 1482930#L1999-2 assume !(0 == ~currentFloorID~0); 1488027#L2005-2 assume ~currentFloorID~0 > 0; 1488023#L2006-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1488024#L455-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1488353#L482-27 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1487964#L2010-2 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1487942#L2152-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1487940#L2487-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1487939#L2206-3 assume !(1 == ~currentHeading~0); 1483387#L2216-9 assume !(0 == ~currentFloorID~0); 1482858#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1471683#L2222-7 assume { :end_inline_continueInDirection } true; 1487938#L2496-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1487934#L228-1 assume !(-1 == ~expectedDirection~0); 1487935#L240-1 assume !(1 == ~expectedDirection~0); 1487927#L241-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1472074#L2511-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1472072#L1626-2 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1472070#L1678-6 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1472068#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1471550#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1471985#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1471983#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1471981#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1471979#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1471978#L203-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1471976#L455-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1471975#L482-42 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1471974#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1471971#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1471968#L1664-32 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1471966#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1471965#L2251-2 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1471963#L2388-4 assume !(0 != timeShift_~tmp___9~3#1); 1471962#L2479-6 assume !(1 == ~doorState~0); 1471961#L2479-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1471959#L1830-4 assume !(1 == stopRequestedInDirection_~dir#1); 1471960#L1999-4 assume !(0 == ~currentFloorID~0); 1482615#L2005-4 assume ~currentFloorID~0 > 0; 1482606#L2006-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1482607#L455-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1482614#L482-48 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1482603#L2010-4 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1482604#L2152-4 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1543212#L2487-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1543211#L2206-6 assume !(1 == ~currentHeading~0); 1543196#L2216-18 assume !(0 == ~currentFloorID~0); 1543186#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1543175#L2222-13 assume { :end_inline_continueInDirection } true; 1543106#L2496-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1543101#L228-2 assume !(-1 == ~expectedDirection~0); 1543102#L240-2 assume !(1 == ~expectedDirection~0); 1588848#L241-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1588847#L2511-2 assume { :end_inline_timeShift } true; 1588846#L2973 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret119#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1588843#L3239-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1588839#L3264-1 bobCall_#t~ret119#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret119#1;havoc bobCall_#t~ret119#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1588837#L726-1 assume 0 == initPersonOnFloor_~floor#1; 1588644#L727-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1588625#L834-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1588623#L518-2 assume !(0 == callOnFloor_~floorID#1); 1536275#L521-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1536273#L530-5 assume { :end_inline_callOnFloor } true; 1536271#L870-1 assume { :end_inline_initPersonOnFloor } true; 1536272#L2906-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret125#1, cleanup_#t~ret126#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~10#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~10#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1534560#L1626-3 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1534561#L1678-9 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1534553#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1467224#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1588501#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1588500#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1588499#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1588498#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1588497#L203-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1588495#L455-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1588494#L482-63 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1588492#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1588491#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1588470#L1664-43 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1588471#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1588436#L2251-3 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1567387#L2388-6 assume !(0 != timeShift_~tmp___9~3#1); 1567385#L2479-9 assume !(1 == ~doorState~0); 1567386#L2479-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1611095#L1830-6 assume !(1 == stopRequestedInDirection_~dir#1); 1611096#L1999-6 assume !(0 == ~currentFloorID~0); 1567269#L2005-6 assume ~currentFloorID~0 > 0; 1567267#L2006-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1567268#L455-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1567285#L482-69 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1567201#L2010-6 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1567180#L2152-6 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1567176#L2487-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1567172#L2206-9 assume !(1 == ~currentHeading~0); 1567166#L2216-27 assume !(0 == ~currentFloorID~0); 1567160#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1567156#L2222-19 assume { :end_inline_continueInDirection } true; 1567152#L2496-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1567150#L228-3 assume !(-1 == ~expectedDirection~0); 1567148#L240-3 assume !(1 == ~expectedDirection~0); 1567143#L241-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1567142#L2511-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1567140#L2988-2 [2022-07-22 02:29:59,317 INFO L754 eck$LassoCheckResult]: Loop: 1567140#L2988-2 assume !false; 1567139#L2989 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1567138#L2992 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1567136#L1473 cleanup_#t~ret125#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~10#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1567135#L2996 assume 1 != cleanup_~tmp___0~10#1; 1567134#L2996-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret54#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~10#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~10#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~9#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~9#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1567130#L455-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1567128#L482-84 anyStopRequested_#t~ret49#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret49#1;havoc anyStopRequested_#t~ret49#1; 1567126#L1734 assume !(0 != anyStopRequested_~tmp___3~1#1); 1567125#L1738 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1567124#L455-85 assume !(0 == isFloorCalling_~floorID#1); 1567061#L459-85 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1567058#L482-85 anyStopRequested_#t~ret50#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret50#1;havoc anyStopRequested_#t~ret50#1; 1567048#L1745 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1567029#L1798 isIdle_#t~ret54#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~10#1 := isIdle_#t~ret54#1;havoc isIdle_#t~ret54#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~10#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1567027#L1811 cleanup_#t~ret126#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret126#1;havoc cleanup_#t~ret126#1; 1567025#L3008 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~15#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret4#1, __utac_acc__Specification3_spec__1_#t~ret5#1, __utac_acc__Specification3_spec__1_#t~ret6#1, __utac_acc__Specification3_spec__1_#t~ret7#1, __utac_acc__Specification3_spec__1_#t~ret8#1, __utac_acc__Specification3_spec__1_#t~ret9#1, __utac_acc__Specification3_spec__1_#t~ret10#1, __utac_acc__Specification3_spec__1_#t~ret11#1, __utac_acc__Specification3_spec__1_#t~ret12#1, __utac_acc__Specification3_spec__1_#t~ret13#1, __utac_acc__Specification3_spec__1_#t~ret14#1, __utac_acc__Specification3_spec__1_#t~ret15#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~0#1, __utac_acc__Specification3_spec__1_~tmp___0~0#1, __utac_acc__Specification3_spec__1_~tmp___1~0#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1567022#L1626-4 __utac_acc__Specification3_spec__1_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0#1 := __utac_acc__Specification3_spec__1_#t~ret4#1;havoc __utac_acc__Specification3_spec__1_#t~ret4#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~0#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1567020#L1678-12 __utac_acc__Specification3_spec__1_#t~ret5#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret5#1;havoc __utac_acc__Specification3_spec__1_#t~ret5#1; 1567018#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1565386#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1552321#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1552319#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1552317#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1552314#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1552313#L203-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1552311#L455-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1552310#L482-89 stopRequestedAtCurrentFloor_#t~ret67#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 1552309#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1552308#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1552303#L1664-54 stopRequestedAtCurrentFloor_#t~ret68#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1; 1552298#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1552189#L2251-4 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1552138#L2388-8 assume !(0 != timeShift_~tmp___9~3#1); 1551990#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1551991#L2479-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~11#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~11#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1551479#L1830-8 assume !(1 == stopRequestedInDirection_~dir#1); 1551480#L1999-8 assume !(0 == ~currentFloorID~0); 1565766#L2005-8 assume ~currentFloorID~0 > 0; 1565763#L2006-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1565764#L455-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1565765#L482-95 stopRequestedInDirection_#t~ret61#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1; 1565761#L2010-8 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1565762#L2152-8 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1566142#L2487-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret66#1, continueInDirection_~dir#1, continueInDirection_~tmp~12#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~12#1;~currentHeading~0 := continueInDirection_~dir#1; 1567444#L2206-12 assume !(1 == ~currentHeading~0); 1550882#L2216-36 assume !(0 == ~currentFloorID~0); 1550191#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1567431#L2222-25 assume { :end_inline_continueInDirection } true; 1567427#L2496-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret16#1, __utac_acc__Specification3_spec__2_#t~ret17#1, __utac_acc__Specification3_spec__2_~tmp~1#1, __utac_acc__Specification3_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification3_spec__2_~tmp~1#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1#1; 1567425#L228-4 assume !(-1 == ~expectedDirection~0); 1567410#L240-4 assume !(1 == ~expectedDirection~0); 1567144#L241-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1567141#L2511-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1567140#L2988-2 [2022-07-22 02:29:59,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:59,318 INFO L85 PathProgramCache]: Analyzing trace with hash -650949352, now seen corresponding path program 1 times [2022-07-22 02:29:59,318 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:59,318 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1803267157] [2022-07-22 02:29:59,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:59,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:59,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:59,358 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:59,358 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:59,358 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1803267157] [2022-07-22 02:29:59,358 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1803267157] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:59,360 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:59,360 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:59,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995510252] [2022-07-22 02:29:59,360 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:59,362 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:59,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:59,362 INFO L85 PathProgramCache]: Analyzing trace with hash -549410737, now seen corresponding path program 1 times [2022-07-22 02:29:59,362 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:59,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729742386] [2022-07-22 02:29:59,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:59,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:59,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:59,383 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:59,383 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:59,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1729742386] [2022-07-22 02:29:59,383 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1729742386] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:59,383 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:59,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:59,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [831828611] [2022-07-22 02:29:59,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:59,384 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:59,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:59,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:29:59,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:29:59,386 INFO L87 Difference]: Start difference. First operand 212505 states and 390221 transitions. cyclomatic complexity: 177717 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:30:02,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:30:02,509 INFO L93 Difference]: Finished difference Result 227737 states and 415253 transitions. [2022-07-22 02:30:02,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:30:02,510 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 227737 states and 415253 transitions. [2022-07-22 02:30:03,832 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 53976