./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 12:18:42,542 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 12:18:42,547 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 12:18:42,586 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 12:18:42,589 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 12:18:42,592 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 12:18:42,595 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 12:18:42,599 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 12:18:42,601 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 12:18:42,604 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 12:18:42,605 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 12:18:42,609 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 12:18:42,609 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 12:18:42,615 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 12:18:42,617 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 12:18:42,618 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 12:18:42,621 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 12:18:42,623 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 12:18:42,625 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 12:18:42,628 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 12:18:42,631 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 12:18:42,633 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 12:18:42,637 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 12:18:42,638 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 12:18:42,644 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 12:18:42,644 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 12:18:42,645 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 12:18:42,646 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 12:18:42,646 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 12:18:42,647 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 12:18:42,648 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 12:18:42,648 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 12:18:42,649 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 12:18:42,650 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 12:18:42,651 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 12:18:42,652 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 12:18:42,653 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 12:18:42,653 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 12:18:42,653 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 12:18:42,655 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 12:18:42,655 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 12:18:42,657 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-16 12:18:42,690 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 12:18:42,691 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 12:18:42,692 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 12:18:42,692 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 12:18:42,693 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 12:18:42,694 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 12:18:42,694 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 12:18:42,694 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-16 12:18:42,695 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-16 12:18:42,695 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-16 12:18:42,696 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-16 12:18:42,696 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-16 12:18:42,697 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-16 12:18:42,697 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 12:18:42,697 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 12:18:42,698 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-16 12:18:42,698 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 12:18:42,698 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 12:18:42,698 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 12:18:42,699 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-16 12:18:42,699 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-16 12:18:42,699 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-16 12:18:42,700 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 12:18:42,701 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 12:18:42,701 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-16 12:18:42,702 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 12:18:42,702 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-16 12:18:42,702 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 12:18:42,703 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 12:18:42,703 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 12:18:42,703 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 12:18:42,705 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-16 12:18:42,705 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 [2022-11-16 12:18:43,009 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 12:18:43,032 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 12:18:43,035 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 12:18:43,036 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 12:18:43,037 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 12:18:43,038 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c [2022-11-16 12:18:43,143 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/data/2a4977588/eaae38e6d924455fbb75cd788e6838ab/FLAG18dd26307 [2022-11-16 12:18:43,718 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 12:18:43,718 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c [2022-11-16 12:18:43,754 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/data/2a4977588/eaae38e6d924455fbb75cd788e6838ab/FLAG18dd26307 [2022-11-16 12:18:43,954 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/data/2a4977588/eaae38e6d924455fbb75cd788e6838ab [2022-11-16 12:18:43,956 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 12:18:43,958 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 12:18:43,963 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 12:18:43,964 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 12:18:43,968 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 12:18:43,968 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:18:43" (1/1) ... [2022-11-16 12:18:43,970 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5ddf400a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:43, skipping insertion in model container [2022-11-16 12:18:43,970 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:18:43" (1/1) ... [2022-11-16 12:18:43,977 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 12:18:44,046 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 12:18:44,360 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c[21710,21723] [2022-11-16 12:18:44,669 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:18:44,686 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 12:18:44,747 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c[21710,21723] [2022-11-16 12:18:44,822 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:18:44,846 INFO L208 MainTranslator]: Completed translation [2022-11-16 12:18:44,846 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44 WrapperNode [2022-11-16 12:18:44,847 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 12:18:44,848 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 12:18:44,848 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 12:18:44,848 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 12:18:44,856 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:44,883 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,246 INFO L138 Inliner]: procedures = 87, calls = 336, calls flagged for inlining = 189, calls inlined = 613, statements flattened = 20577 [2022-11-16 12:18:45,246 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 12:18:45,247 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 12:18:45,247 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 12:18:45,247 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 12:18:45,257 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,258 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,338 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,338 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,543 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,689 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,711 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,801 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,856 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 12:18:45,858 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 12:18:45,859 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 12:18:45,860 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 12:18:45,861 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (1/1) ... [2022-11-16 12:18:45,869 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-16 12:18:45,882 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:18:45,898 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-16 12:18:45,916 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dadfe6a6-4011-4db7-b88f-91420351c770/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-16 12:18:45,946 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 12:18:45,946 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 12:18:45,947 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 12:18:45,947 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 12:18:46,150 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 12:18:46,153 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 12:18:55,501 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 12:18:55,550 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 12:18:55,550 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-16 12:18:55,559 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:18:55 BoogieIcfgContainer [2022-11-16 12:18:55,560 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 12:18:55,561 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-16 12:18:55,562 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-16 12:18:55,566 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-16 12:18:55,566 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:18:55,567 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 16.11 12:18:43" (1/3) ... [2022-11-16 12:18:55,568 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@49fd3b86 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.11 12:18:55, skipping insertion in model container [2022-11-16 12:18:55,568 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:18:55,568 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:18:44" (2/3) ... [2022-11-16 12:18:55,569 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@49fd3b86 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.11 12:18:55, skipping insertion in model container [2022-11-16 12:18:55,569 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:18:55,569 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:18:55" (3/3) ... [2022-11-16 12:18:55,575 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product09.cil.c [2022-11-16 12:18:55,713 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-16 12:18:55,713 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-16 12:18:55,713 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-16 12:18:55,713 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-16 12:18:55,713 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-16 12:18:55,714 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-16 12:18:55,714 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-16 12:18:55,714 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-16 12:18:55,734 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5993 states, 5992 states have (on average 1.8775033377837116) internal successors, (11250), 5992 states have internal predecessors, (11250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:18:55,917 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1214 [2022-11-16 12:18:55,918 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:18:55,918 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:18:55,937 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:18:55,937 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:18:55,938 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-16 12:18:55,952 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5993 states, 5992 states have (on average 1.8775033377837116) internal successors, (11250), 5992 states have internal predecessors, (11250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:18:56,024 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1214 [2022-11-16 12:18:56,025 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:18:56,025 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:18:56,031 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:18:56,031 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:18:56,041 INFO L748 eck$LassoCheckResult]: Stem: 3750#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 5857#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 1091#L2430true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 234#L2423true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 2126#L2438true main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 852#L2777true assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 3007#L2754true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1612#L247true assume { :end_inline_initFloors } true; 2034#L1004true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 3246#L878true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 3340#L903true bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4894#L525true assume 0 == initPersonOnFloor_~floor#1; 4837#L526true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2137#L633-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 921#L317true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3651#L329-2true assume { :end_inline_callOnFloor } true; 1248#L669true assume { :end_inline_initPersonOnFloor } true; 5356#L2504true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1012#L1184true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 5875#L1236true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 3358#L2814true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 5140#L2876true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 4377#L1201-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 215#L1222-5true __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 682#L2880true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 21#L2920true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 4200#L254true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1670#L281true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 117#L1797true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1825#L1809true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 4303#L1948true assume !(0 != timeShift_~tmp___9~2#1); 3239#L2039true assume !(1 == ~doorState~0); 5945#L2039-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1930#L1388true assume !(1 == stopRequestedInDirection_~dir#1); 4796#L1557true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1597#L1710true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 441#L2047true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1520#L1764true assume !(1 == ~currentHeading~0); 5103#L1774true assume !(0 == ~currentFloorID~0); 2789#L1774-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4490#L1780-1true assume { :end_inline_continueInDirection } true; 1688#L2056-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1540#L2945true assume !(-1 == ~expectedDirection~0); 686#L2957true assume !(1 == ~expectedDirection~0); 5926#L2958true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1202#L2071true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3185#L1184-1true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 3643#L1236-3true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 5281#L2814-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 11#L2815-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 4847#L1201-11true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 532#L1222-11true __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 1214#L2819-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 4740#L2920-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1792#L254-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 4533#L281-21true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5291#L1797-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 2298#L1809-1true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 4345#L1948-2true assume !(0 != timeShift_~tmp___9~2#1); 4046#L2039-3true assume !(1 == ~doorState~0); 4643#L2039-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 3017#L1388-2true assume !(1 == stopRequestedInDirection_~dir#1); 957#L1557-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 4626#L1710-2true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 783#L2047-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4941#L1764-3true assume !(1 == ~currentHeading~0); 5617#L1774-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 748#L1774-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1703#L1780-7true assume { :end_inline_continueInDirection } true; 1128#L2056-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2802#L2945-1true assume !(-1 == ~expectedDirection~0); 1484#L2957-1true assume !(1 == ~expectedDirection~0); 5196#L2958-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 5523#L2071-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2042#L1184-2true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 4017#L1236-6true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1015#L2814-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 3105#L2815-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 404#L1201-22true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 3877#L1222-22true __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 4759#L2819-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 3890#L2920-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1571#L254-42true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2864#L281-42true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5194#L1797-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 5047#L1809-2true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 5375#L1948-4true assume !(0 != timeShift_~tmp___9~2#1); 159#L2039-6true assume !(1 == ~doorState~0); 1258#L2039-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 3348#L1388-4true assume !(1 == stopRequestedInDirection_~dir#1); 4449#L1557-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 4420#L1710-4true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 5371#L2047-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5171#L1764-6true assume !(1 == ~currentHeading~0); 1973#L1774-18true assume !(0 == ~currentFloorID~0); 740#L1774-20true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2362#L1780-13true assume { :end_inline_continueInDirection } true; 4960#L2056-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 4820#L2945-2true assume !(-1 == ~expectedDirection~0); 4669#L2957-2true assume !(1 == ~expectedDirection~0); 3585#L2958-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1160#L2071-2true assume { :end_inline_timeShift } true; 966#L2571true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 5708#L878-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 2959#L903-1true bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5278#L525-1true assume 0 == initPersonOnFloor_~floor#1; 2190#L526-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4340#L633-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5662#L317-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5346#L329-5true assume { :end_inline_callOnFloor } true; 3033#L669-1true assume { :end_inline_initPersonOnFloor } true; 4728#L2504-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 5465#L1184-3true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 2539#L1236-9true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 585#L2814-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 540#L2815-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 708#L1201-33true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 2587#L1222-33true __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 258#L2819-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 314#L2920-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 3453#L254-63true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2674#L281-63true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 777#L1797-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1583#L1809-3true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 2156#L1948-6true assume !(0 != timeShift_~tmp___9~2#1); 2177#L2039-9true assume !(1 == ~doorState~0); 5399#L2039-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 3321#L1388-6true assume !(1 == stopRequestedInDirection_~dir#1); 206#L1557-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5562#L1710-6true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 922#L2047-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2761#L1764-9true assume !(1 == ~currentHeading~0); 5203#L1774-27true assume !(0 == ~currentFloorID~0); 353#L1774-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3444#L1780-19true assume { :end_inline_continueInDirection } true; 1897#L2056-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 774#L2945-3true assume !(-1 == ~expectedDirection~0); 3806#L2957-3true assume !(1 == ~expectedDirection~0); 1968#L2958-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2336#L2071-3true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2542#L2586-2true [2022-11-16 12:18:56,043 INFO L750 eck$LassoCheckResult]: Loop: 2542#L2586-2true assume !false; 3310#L2587true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 510#L2590true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 392#L1035true cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 2000#L2594true assume 1 != cleanup_~tmp___0~8#1; 2288#L2594-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 5279#L254-84true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 4818#L281-84true anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 5117#L1292true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 4855#L1356true isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1172#L1369true cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 3003#L2606true assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4653#L1184-4true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 134#L1236-12true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 5284#L2814-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 2165#L2815-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 5933#L1201-44true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 4001#L1222-44true __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 1377#L2819-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 3518#L2920-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 504#L254-89true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2994#L281-89true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3914#L1797-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 259#L1809-4true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 323#L1948-8true assume !(0 != timeShift_~tmp___9~2#1); 4752#L2039-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4406#L2039-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5689#L1388-8true assume !(1 == stopRequestedInDirection_~dir#1); 4418#L1557-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 895#L1710-8true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1004#L2047-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4581#L1764-12true assume !(1 == ~currentHeading~0); 5771#L1774-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4171#L1774-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5728#L1780-25true assume { :end_inline_continueInDirection } true; 1464#L2056-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 5011#L2945-4true assume !(-1 == ~expectedDirection~0); 4414#L2957-4true assume !(1 == ~expectedDirection~0); 1141#L2958-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3933#L2071-4true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2542#L2586-2true [2022-11-16 12:18:56,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:18:56,049 INFO L85 PathProgramCache]: Analyzing trace with hash -1585590561, now seen corresponding path program 1 times [2022-11-16 12:18:56,059 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:18:56,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13061408] [2022-11-16 12:18:56,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:18:56,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:18:56,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:18:56,771 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:18:56,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:18:56,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13061408] [2022-11-16 12:18:56,773 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [13061408] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:18:56,774 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:18:56,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:18:56,778 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1400872131] [2022-11-16 12:18:56,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:18:56,786 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:18:56,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:18:56,790 INFO L85 PathProgramCache]: Analyzing trace with hash -199939110, now seen corresponding path program 1 times [2022-11-16 12:18:56,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:18:56,790 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1790374654] [2022-11-16 12:18:56,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:18:56,790 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:18:56,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:18:56,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:18:56,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:18:56,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1790374654] [2022-11-16 12:18:56,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1790374654] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:18:56,973 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:18:56,973 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-16 12:18:56,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [296334027] [2022-11-16 12:18:56,974 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:18:56,975 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:18:56,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:18:57,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 12:18:57,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-16 12:18:57,034 INFO L87 Difference]: Start difference. First operand has 5993 states, 5992 states have (on average 1.8775033377837116) internal successors, (11250), 5992 states have internal predecessors, (11250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:05,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:05,788 INFO L93 Difference]: Finished difference Result 15416 states and 28559 transitions. [2022-11-16 12:19:05,789 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15416 states and 28559 transitions. [2022-11-16 12:19:05,927 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3538 [2022-11-16 12:19:06,026 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15416 states to 15293 states and 28420 transitions. [2022-11-16 12:19:06,028 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15293 [2022-11-16 12:19:06,045 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15293 [2022-11-16 12:19:06,046 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15293 states and 28420 transitions. [2022-11-16 12:19:06,082 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:06,082 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15293 states and 28420 transitions. [2022-11-16 12:19:06,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15293 states and 28420 transitions. [2022-11-16 12:19:06,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15293 to 10084. [2022-11-16 12:19:06,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10084 states, 10084 states have (on average 1.8634470448234828) internal successors, (18791), 10083 states have internal predecessors, (18791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:06,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10084 states to 10084 states and 18791 transitions. [2022-11-16 12:19:06,432 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10084 states and 18791 transitions. [2022-11-16 12:19:06,439 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-16 12:19:06,442 INFO L428 stractBuchiCegarLoop]: Abstraction has 10084 states and 18791 transitions. [2022-11-16 12:19:06,444 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-16 12:19:06,444 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10084 states and 18791 transitions. [2022-11-16 12:19:06,491 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2261 [2022-11-16 12:19:06,491 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:06,491 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:06,501 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:06,501 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:06,504 INFO L748 eck$LassoCheckResult]: Stem: 26852#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 26853#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 23756#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 22082#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 22083#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 23330#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 23331#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 24611#L247 assume { :end_inline_initFloors } true; 24612#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 25184#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 22716#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 26523#L525 assume 0 == initPersonOnFloor_~floor#1; 27423#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 21487#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 23459#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 23460#L329-2 assume { :end_inline_callOnFloor } true; 24028#L669 assume { :end_inline_initPersonOnFloor } true; 24029#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 23621#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 23622#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 26542#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 26543#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 27218#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 22032#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 22033#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 21538#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 21539#L254 assume !(0 == isFloorCalling_~floorID#1); 26752#L258 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 22350#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 21795#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 21796#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 24902#L1948 assume !(0 != timeShift_~tmp___9~2#1); 26445#L2039 assume !(1 == ~doorState~0); 26446#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 25043#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 23037#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 22408#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 21887#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 22542#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 22544#L1764 assume !(1 == ~currentHeading~0); 24473#L1774 assume !(0 == ~currentFloorID~0); 26024#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26025#L1780-1 assume { :end_inline_continueInDirection } true; 24707#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 24504#L2945 assume !(-1 == ~expectedDirection~0); 23026#L2957 assume !(1 == ~expectedDirection~0); 23027#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23949#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 23950#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 26386#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 26788#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 27558#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 26619#L1201-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 23193#L1222-16 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 25778#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 22341#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 27387#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 22417#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 27295#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 24918#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 25515#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 27046#L2039-3 assume !(1 == ~doorState~0); 27047#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 26231#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 26232#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 22283#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 23211#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 23212#L1764-3 assume !(1 == ~currentHeading~0); 27463#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22348#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23147#L1780-7 assume { :end_inline_continueInDirection } true; 23822#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 23823#L2945-1 assume !(-1 == ~expectedDirection~0); 24410#L2957-1 assume !(1 == ~expectedDirection~0); 24411#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 27531#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 25198#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 25199#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 23626#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 23628#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 22736#L1201-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 21715#L1222-27 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 26348#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 21745#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 26948#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 21758#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 26094#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 27261#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 27495#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 21897#L2039-6 assume !(1 == ~doorState~0); 21898#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 24044#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 26531#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 21620#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 27235#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 27522#L1764-6 assume !(1 == ~currentHeading~0); 27523#L1774-18 assume !(0 == ~currentFloorID~0); 23132#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 23133#L1780-13 assume { :end_inline_continueInDirection } true; 25586#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 27418#L2945-2 assume !(-1 == ~expectedDirection~0); 24976#L2957-2 assume !(1 == ~expectedDirection~0); 21890#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23879#L2071-2 assume { :end_inline_timeShift } true; 23532#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 23533#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 23762#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 26175#L525-1 assume 0 == initPersonOnFloor_~floor#1; 25374#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 21609#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 27202#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22071#L329-5 assume { :end_inline_callOnFloor } true; 26246#L669-1 assume { :end_inline_initPersonOnFloor } true; 26247#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 27379#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 25767#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 22838#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 21628#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 21630#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 22143#L1222-38 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 27462#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 21683#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 22256#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 24278#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 23201#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 23203#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 24576#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 25331#L2039-9 assume !(1 == ~doorState~0); 25354#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 26508#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 26509#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 31367#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 31402#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 25994#L1764-9 assume !(1 == ~currentHeading~0); 25995#L1774-27 assume !(0 == ~currentFloorID~0); 22343#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22344#L1780-19 assume { :end_inline_continueInDirection } true; 23755#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 23194#L2945-3 assume !(-1 == ~expectedDirection~0); 23195#L2957-3 assume !(1 == ~expectedDirection~0); 23861#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 25093#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 25561#L2586-2 [2022-11-16 12:19:06,505 INFO L750 eck$LassoCheckResult]: Loop: 25561#L2586-2 assume !false; 25773#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 22686#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 22434#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 22435#L2594 assume 1 != cleanup_~tmp___0~8#1; 25141#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 25503#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 23419#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 27416#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 22867#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 23898#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 23899#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 26218#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 21838#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 21839#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 26552#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 24750#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 22646#L1222-49 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 25810#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 21580#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 26677#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 24583#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 26212#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 22137#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 22138#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 22275#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 27231#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 27232#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 27648#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 29648#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 29646#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 29647#L1764-12 assume !(1 == ~currentHeading~0); 31366#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 25678#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27108#L1780-25 assume { :end_inline_continueInDirection } true; 24378#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 24379#L2945-4 assume !(-1 == ~expectedDirection~0); 25772#L2957-4 assume !(1 == ~expectedDirection~0); 23846#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23847#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 25561#L2586-2 [2022-11-16 12:19:06,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:06,507 INFO L85 PathProgramCache]: Analyzing trace with hash -1192417228, now seen corresponding path program 1 times [2022-11-16 12:19:06,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:06,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1178780985] [2022-11-16 12:19:06,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:06,510 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:06,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:06,706 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:06,707 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:06,710 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1178780985] [2022-11-16 12:19:06,711 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1178780985] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:06,711 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:06,711 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:06,712 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [890997139] [2022-11-16 12:19:06,712 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:06,713 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:06,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:06,716 INFO L85 PathProgramCache]: Analyzing trace with hash -1547443851, now seen corresponding path program 1 times [2022-11-16 12:19:06,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:06,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2054066566] [2022-11-16 12:19:06,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:06,717 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:06,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:06,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:06,847 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:06,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2054066566] [2022-11-16 12:19:06,849 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2054066566] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:06,849 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:06,849 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:19:06,850 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1518954178] [2022-11-16 12:19:06,850 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:06,850 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:06,851 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:06,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:19:06,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:19:06,854 INFO L87 Difference]: Start difference. First operand 10084 states and 18791 transitions. cyclomatic complexity: 8708 Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:11,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:11,881 INFO L93 Difference]: Finished difference Result 23331 states and 43450 transitions. [2022-11-16 12:19:11,881 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23331 states and 43450 transitions. [2022-11-16 12:19:12,043 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5680 [2022-11-16 12:19:12,163 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23331 states to 23331 states and 43450 transitions. [2022-11-16 12:19:12,164 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23331 [2022-11-16 12:19:12,186 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23331 [2022-11-16 12:19:12,186 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23331 states and 43450 transitions. [2022-11-16 12:19:12,223 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:12,223 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23331 states and 43450 transitions. [2022-11-16 12:19:12,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23331 states and 43450 transitions. [2022-11-16 12:19:12,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23331 to 9944. [2022-11-16 12:19:12,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9944 states, 9944 states have (on average 1.8635358004827032) internal successors, (18531), 9943 states have internal predecessors, (18531), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:12,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9944 states to 9944 states and 18531 transitions. [2022-11-16 12:19:12,578 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9944 states and 18531 transitions. [2022-11-16 12:19:12,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-16 12:19:12,579 INFO L428 stractBuchiCegarLoop]: Abstraction has 9944 states and 18531 transitions. [2022-11-16 12:19:12,580 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-16 12:19:12,580 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9944 states and 18531 transitions. [2022-11-16 12:19:12,635 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2226 [2022-11-16 12:19:12,635 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:12,635 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:12,645 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:12,645 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:12,648 INFO L748 eck$LassoCheckResult]: Stem: 60214#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 60215#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 57182#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 55525#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 55526#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 56758#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 56759#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 58017#L247 assume { :end_inline_initFloors } true; 58018#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 58589#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 56152#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 59903#L525 assume 0 == initPersonOnFloor_~floor#1; 60756#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 54927#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 56886#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 56887#L329-2 assume { :end_inline_callOnFloor } true; 57448#L669 assume { :end_inline_initPersonOnFloor } true; 57449#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 57047#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 57048#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 59921#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 59922#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 60558#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 55471#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 55472#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 54984#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 54985#L254 assume !(0 == isFloorCalling_~floorID#1); 60116#L258 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 55787#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 55238#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 55239#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 58307#L1948 assume !(0 != timeShift_~tmp___9~2#1); 59831#L2039 assume !(1 == ~doorState~0); 59832#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 58449#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 56474#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 55844#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 55328#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 55983#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 55985#L1764 assume !(1 == ~currentHeading~0); 57888#L1774 assume !(0 == ~currentFloorID~0); 59420#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 59421#L1780-1 assume { :end_inline_continueInDirection } true; 58115#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 57916#L2945 assume !(-1 == ~expectedDirection~0); 56462#L2957 assume !(1 == ~expectedDirection~0); 56463#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 57370#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 57371#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 59773#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 60151#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 60878#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 61463#L2825-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 61434#L1201-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 61426#L1222-12 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 61418#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 61412#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 61410#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 61405#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 61402#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 61401#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 61399#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 61398#L2039-3 assume !(1 == ~doorState~0); 61396#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 61392#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 61347#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 61342#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 61340#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 61341#L1764-3 assume !(1 == ~currentHeading~0); 61656#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 55785#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 56582#L1780-7 assume { :end_inline_continueInDirection } true; 57247#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 57248#L2945-1 assume !(-1 == ~expectedDirection~0); 57824#L2957-1 assume !(1 == ~expectedDirection~0); 57825#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 61214#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 61213#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 61212#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 61211#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 61210#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 61208#L2825-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 61204#L1201-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 61185#L1222-23 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 61179#L2830-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 61168#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 61165#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 61161#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 61158#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 61157#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 61155#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 61153#L2039-6 assume !(1 == ~doorState~0); 61152#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 61149#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 61116#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 61099#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 61098#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 61097#L1764-6 assume !(1 == ~currentHeading~0); 61096#L1774-18 assume !(0 == ~currentFloorID~0); 56567#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56568#L1780-13 assume { :end_inline_continueInDirection } true; 58984#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 60749#L2945-2 assume !(-1 == ~expectedDirection~0); 58380#L2957-2 assume !(1 == ~expectedDirection~0); 55326#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 57302#L2071-2 assume { :end_inline_timeShift } true; 56958#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 56959#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 57188#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 59566#L525-1 assume 0 == initPersonOnFloor_~floor#1; 58776#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 55049#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 60544#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 55509#L329-5 assume { :end_inline_callOnFloor } true; 59636#L669-1 assume { :end_inline_initPersonOnFloor } true; 59637#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 61642#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 61641#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 61640#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 61639#L2815-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 61637#L2825-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 61633#L1201-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 61614#L1222-34 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 61608#L2830-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 61601#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 61598#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 61591#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 61588#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 61586#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 61584#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 61583#L2039-9 assume !(1 == ~doorState~0); 61581#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 61577#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 61546#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 61527#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 61525#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 61526#L1764-9 assume !(1 == ~currentHeading~0); 61644#L1774-27 assume !(0 == ~currentFloorID~0); 55780#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55781#L1780-19 assume { :end_inline_continueInDirection } true; 57181#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 63335#L2945-3 assume !(-1 == ~expectedDirection~0); 63329#L2957-3 assume !(1 == ~expectedDirection~0); 63324#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 63322#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 63320#L2586-2 [2022-11-16 12:19:12,650 INFO L750 eck$LassoCheckResult]: Loop: 63320#L2586-2 assume !false; 63319#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 63318#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 63317#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 63316#L2594 assume 1 != cleanup_~tmp___0~8#1; 63315#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 63313#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 63304#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 63279#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 63274#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 62485#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 61095#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 61094#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 61093#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 61092#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 61090#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 61088#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 61072#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 61063#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 61056#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 61049#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 61048#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 61042#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 61039#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 61038#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 61036#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 61035#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 61034#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 61031#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 60988#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 60979#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 60977#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 60976#L1764-12 assume !(1 == ~currentHeading~0); 60975#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 59073#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 60456#L1780-25 assume { :end_inline_continueInDirection } true; 58116#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 63332#L2945-4 assume !(-1 == ~expectedDirection~0); 63326#L2957-4 assume !(1 == ~expectedDirection~0); 63323#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 63321#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 63320#L2586-2 [2022-11-16 12:19:12,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:12,654 INFO L85 PathProgramCache]: Analyzing trace with hash -1938179061, now seen corresponding path program 1 times [2022-11-16 12:19:12,654 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:12,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1576358467] [2022-11-16 12:19:12,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:12,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:12,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:12,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:12,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:12,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1576358467] [2022-11-16 12:19:12,868 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1576358467] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:12,868 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:12,869 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:12,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1728551044] [2022-11-16 12:19:12,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:12,871 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:12,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:12,871 INFO L85 PathProgramCache]: Analyzing trace with hash -215576406, now seen corresponding path program 1 times [2022-11-16 12:19:12,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:12,873 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1488921506] [2022-11-16 12:19:12,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:12,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:12,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:12,990 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:12,991 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:12,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1488921506] [2022-11-16 12:19:12,992 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1488921506] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:12,992 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:12,992 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:19:12,993 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [211641989] [2022-11-16 12:19:12,993 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:12,993 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:12,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:12,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:19:12,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:19:12,995 INFO L87 Difference]: Start difference. First operand 9944 states and 18531 transitions. cyclomatic complexity: 8588 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:13,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:13,653 INFO L93 Difference]: Finished difference Result 21710 states and 40535 transitions. [2022-11-16 12:19:13,653 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21710 states and 40535 transitions. [2022-11-16 12:19:13,750 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7964 [2022-11-16 12:19:13,832 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21710 states to 21710 states and 40535 transitions. [2022-11-16 12:19:13,832 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21710 [2022-11-16 12:19:13,850 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21710 [2022-11-16 12:19:13,851 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21710 states and 40535 transitions. [2022-11-16 12:19:13,870 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:13,870 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21710 states and 40535 transitions. [2022-11-16 12:19:13,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21710 states and 40535 transitions. [2022-11-16 12:19:14,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21710 to 9962. [2022-11-16 12:19:14,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9962 states, 9962 states have (on average 1.86197550692632) internal successors, (18549), 9961 states have internal predecessors, (18549), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:14,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9962 states to 9962 states and 18549 transitions. [2022-11-16 12:19:14,321 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9962 states and 18549 transitions. [2022-11-16 12:19:14,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:19:14,323 INFO L428 stractBuchiCegarLoop]: Abstraction has 9962 states and 18549 transitions. [2022-11-16 12:19:14,323 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-16 12:19:14,324 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9962 states and 18549 transitions. [2022-11-16 12:19:14,356 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2230 [2022-11-16 12:19:14,357 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:14,357 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:14,361 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:14,361 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:14,362 INFO L748 eck$LassoCheckResult]: Stem: 91983#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 91984#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 88875#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 87204#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 87205#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 88446#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 88447#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 89723#L247 assume { :end_inline_initFloors } true; 89724#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 90306#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 87833#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 91653#L525 assume 0 == initPersonOnFloor_~floor#1; 92567#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 86603#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 88575#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 88576#L329-2 assume { :end_inline_callOnFloor } true; 89147#L669 assume { :end_inline_initPersonOnFloor } true; 89148#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 88737#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 88738#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 91671#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 91672#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 92347#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 87148#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 87149#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 86660#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 86661#L254 assume !(0 == isFloorCalling_~floorID#1); 91877#L258 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 87466#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 86914#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 86916#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 89802#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 87537#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 87538#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 93145#L1948 assume !(0 != timeShift_~tmp___9~2#1); 91575#L2039 assume !(1 == ~doorState~0); 91576#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 90165#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 88160#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 87523#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 87005#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 87664#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 87666#L1764 assume !(1 == ~currentHeading~0); 89592#L1774 assume !(0 == ~currentFloorID~0); 91151#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 91152#L1780-1 assume { :end_inline_continueInDirection } true; 91424#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 93038#L2945 assume !(-1 == ~expectedDirection~0); 93020#L2957 assume !(1 == ~expectedDirection~0); 93015#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 93014#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 93013#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 93012#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 93010#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 93009#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 93008#L2825-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 93006#L1201-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 93002#L1222-12 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 92964#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 92962#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 92955#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 92951#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 92950#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 92944#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 92939#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 92937#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 92936#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 92935#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 92934#L2039-3 assume !(1 == ~doorState~0); 92933#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 92927#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 92888#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 92882#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 92880#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 92881#L1764-3 assume !(1 == ~currentHeading~0); 93143#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 87464#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88268#L1780-7 assume { :end_inline_continueInDirection } true; 89063#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 94355#L2945-1 assume !(-1 == ~expectedDirection~0); 94352#L2957-1 assume !(1 == ~expectedDirection~0); 94306#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 92762#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 90318#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 90319#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 88741#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 88742#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 93364#L2825-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 93360#L1201-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 93341#L1222-23 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 93335#L2830-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 93328#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 93327#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 86874#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 91223#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 92676#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 93200#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 92391#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 92393#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 93366#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 87013#L2039-6 assume !(1 == ~doorState~0); 87014#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 89160#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 91660#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 86736#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 92368#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 92667#L1764-6 assume !(1 == ~currentHeading~0); 92668#L1774-18 assume !(0 == ~currentFloorID~0); 88253#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 88254#L1780-13 assume { :end_inline_continueInDirection } true; 90709#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 93530#L2945-2 assume !(-1 == ~expectedDirection~0); 93528#L2957-2 assume !(1 == ~expectedDirection~0); 93526#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 93525#L2071-2 assume { :end_inline_timeShift } true; 93524#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 93523#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 93517#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 93516#L525-1 assume 0 == initPersonOnFloor_~floor#1; 93506#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 93481#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 93478#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 93475#L329-5 assume { :end_inline_callOnFloor } true; 93474#L669-1 assume { :end_inline_initPersonOnFloor } true; 93412#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 93411#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 93410#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 93409#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 93408#L2815-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 93406#L2825-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 93402#L1201-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 93383#L1222-34 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 93377#L2830-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 93080#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 93077#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 93074#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 93073#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 93070#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 93067#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 93065#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 93064#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 93063#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 93054#L2039-9 assume !(1 == ~doorState~0); 93050#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 92866#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 92846#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 87461#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 92830#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 92828#L1764-9 assume !(1 == ~currentHeading~0); 92827#L1774-27 assume !(0 == ~currentFloorID~0); 87458#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 87459#L1780-19 assume { :end_inline_continueInDirection } true; 88874#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 88315#L2945-3 assume !(-1 == ~expectedDirection~0); 88316#L2957-3 assume !(1 == ~expectedDirection~0); 88977#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 90214#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 90683#L2586-2 [2022-11-16 12:19:14,363 INFO L750 eck$LassoCheckResult]: Loop: 90683#L2586-2 assume !false; 90897#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 87803#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 87550#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 87551#L2594 assume 1 != cleanup_~tmp___0~8#1; 90261#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 90626#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 88534#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 92558#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 87984#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 89012#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 89013#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 94349#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 94348#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 94347#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 94345#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 94343#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 94327#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 94318#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 94311#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 93317#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 93316#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 93311#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 93310#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 93297#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 93292#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 93289#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 93287#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 93284#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 93283#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 93282#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 93267#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 93252#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 93243#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 93201#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 92456#L1764-12 assume !(1 == ~currentHeading~0); 92457#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 90799#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 92235#L1780-25 assume { :end_inline_continueInDirection } true; 89496#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 89497#L2945-4 assume !(-1 == ~expectedDirection~0); 90896#L2957-4 assume !(1 == ~expectedDirection~0); 88962#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 88963#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 90683#L2586-2 [2022-11-16 12:19:14,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:14,366 INFO L85 PathProgramCache]: Analyzing trace with hash -610931705, now seen corresponding path program 1 times [2022-11-16 12:19:14,366 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:14,366 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [477102296] [2022-11-16 12:19:14,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:14,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:14,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:14,544 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:14,545 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:14,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [477102296] [2022-11-16 12:19:14,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [477102296] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:14,546 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:14,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:14,550 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1230234865] [2022-11-16 12:19:14,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:14,551 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:14,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:14,552 INFO L85 PathProgramCache]: Analyzing trace with hash 1388450384, now seen corresponding path program 1 times [2022-11-16 12:19:14,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:14,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1412697922] [2022-11-16 12:19:14,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:14,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:14,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:14,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:14,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:14,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1412697922] [2022-11-16 12:19:14,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1412697922] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:14,636 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:14,637 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:19:14,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1046902529] [2022-11-16 12:19:14,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:14,637 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:14,638 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:14,639 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:19:14,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:19:14,640 INFO L87 Difference]: Start difference. First operand 9962 states and 18549 transitions. cyclomatic complexity: 8588 Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 7 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:18,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:18,723 INFO L93 Difference]: Finished difference Result 61639 states and 115227 transitions. [2022-11-16 12:19:18,723 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 61639 states and 115227 transitions. [2022-11-16 12:19:19,048 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22257 [2022-11-16 12:19:19,270 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 61639 states to 61639 states and 115227 transitions. [2022-11-16 12:19:19,271 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61639 [2022-11-16 12:19:19,327 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61639 [2022-11-16 12:19:19,327 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61639 states and 115227 transitions. [2022-11-16 12:19:19,369 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:19,370 INFO L218 hiAutomatonCegarLoop]: Abstraction has 61639 states and 115227 transitions. [2022-11-16 12:19:19,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61639 states and 115227 transitions. [2022-11-16 12:19:20,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61639 to 19883. [2022-11-16 12:19:20,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19883 states, 19883 states have (on average 1.86154000905296) internal successors, (37013), 19882 states have internal predecessors, (37013), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:20,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19883 states to 19883 states and 37013 transitions. [2022-11-16 12:19:20,163 INFO L240 hiAutomatonCegarLoop]: Abstraction has 19883 states and 37013 transitions. [2022-11-16 12:19:20,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-16 12:19:20,165 INFO L428 stractBuchiCegarLoop]: Abstraction has 19883 states and 37013 transitions. [2022-11-16 12:19:20,165 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-16 12:19:20,165 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19883 states and 37013 transitions. [2022-11-16 12:19:20,234 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4470 [2022-11-16 12:19:20,234 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:20,234 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:20,238 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:20,238 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:20,239 INFO L748 eck$LassoCheckResult]: Stem: 163892#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 163893#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 160565#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 158855#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 158856#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 160130#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 160131#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 161439#L247 assume { :end_inline_initFloors } true; 161440#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 162050#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 159495#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 163517#L525 assume 0 == initPersonOnFloor_~floor#1; 164621#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 158256#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 160260#L317 assume !(0 == callOnFloor_~floorID#1); 160262#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 160969#L329-2 assume { :end_inline_callOnFloor } true; 160842#L669 assume { :end_inline_initPersonOnFloor } true; 160843#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 160424#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 160425#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 163539#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 163540#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 164331#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 158803#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 158804#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 158307#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 158308#L254 assume !(0 == isFloorCalling_~floorID#1); 163769#L258 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 159124#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 165391#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 165390#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 165385#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 165383#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 165382#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 165380#L1948 assume !(0 != timeShift_~tmp___9~2#1); 165379#L2039 assume !(1 == ~doorState~0); 165378#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 165373#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 159827#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 159828#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 165338#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 165335#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 165334#L1764 assume !(1 == ~currentHeading~0); 165331#L1774 assume !(0 == ~currentFloorID~0); 165330#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 165329#L1780-1 assume { :end_inline_continueInDirection } true; 165326#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 165324#L2945 assume !(-1 == ~expectedDirection~0); 165321#L2957 assume !(1 == ~expectedDirection~0); 165319#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 165318#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 165317#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 165316#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 165315#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 165313#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 165312#L2825-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 165269#L1201-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 165256#L1222-12 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 165239#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 165233#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 165231#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 165227#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 165226#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 165224#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 165220#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 165218#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 165217#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 165215#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 165213#L2039-3 assume !(1 == ~doorState~0); 165210#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 165204#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 165150#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 165145#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 165143#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 165144#L1764-3 assume !(1 == ~currentHeading~0); 165908#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 159943#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 159944#L1780-7 assume { :end_inline_continueInDirection } true; 166091#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 166088#L2945-1 assume !(-1 == ~expectedDirection~0); 166084#L2957-1 assume !(1 == ~expectedDirection~0); 166081#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 166076#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 166070#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 166069#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 166068#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 166054#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 166050#L2825-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 166040#L1201-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 166036#L1222-23 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 165998#L2830-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 165990#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 165905#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 158528#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 163033#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 162453#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 158321#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 158322#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 164390#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 165991#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 158670#L2039-6 assume !(1 == ~doorState~0); 158671#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 160859#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 163526#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 158392#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 164360#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 164786#L1764-6 assume !(1 == ~currentHeading~0); 164787#L1774-18 assume !(0 == ~currentFloorID~0); 159925#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 159926#L1780-13 assume { :end_inline_continueInDirection } true; 168258#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 168253#L2945-2 assume !(-1 == ~expectedDirection~0); 168251#L2957-2 assume !(1 == ~expectedDirection~0); 168213#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 168095#L2071-2 assume { :end_inline_timeShift } true; 168058#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 168056#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 168050#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 168048#L525-1 assume 0 == initPersonOnFloor_~floor#1; 168032#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 168004#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 168002#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 158842#L329-5 assume { :end_inline_callOnFloor } true; 163199#L669-1 assume { :end_inline_initPersonOnFloor } true; 163200#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 164560#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 162677#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 159619#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 159528#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 159529#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 159644#L1222-33 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 158907#L2819-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 158458#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 171659#L254-63 assume !(0 == isFloorCalling_~floorID#1); 171657#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 171654#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 171653#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 171650#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 171647#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 171646#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 171645#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 171644#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 171643#L2039-9 assume !(1 == ~doorState~0); 171642#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 171640#L1388-6 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 162436#L828-15 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 162437#L1392-6 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 171495#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 171593#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 171592#L1764-9 assume !(1 == ~currentHeading~0); 164808#L1774-27 assume !(0 == ~currentFloorID~0); 159117#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 159118#L1780-19 assume { :end_inline_continueInDirection } true; 161775#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 173131#L2945-3 assume !(-1 == ~expectedDirection~0); 163940#L2957-3 assume !(1 == ~expectedDirection~0); 160672#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 173080#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 173078#L2586-2 [2022-11-16 12:19:20,240 INFO L750 eck$LassoCheckResult]: Loop: 173078#L2586-2 assume !false; 173077#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 173045#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 173043#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 173039#L2594 assume 1 != cleanup_~tmp___0~8#1; 172907#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 172902#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 172900#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 172877#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 171207#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 172872#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 172871#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 172870#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 172869#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 172867#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 172868#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 173137#L2825-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 162957#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 160789#L1222-45 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 159950#L2830-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 158349#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 163683#L254-89 assume !(0 == isFloorCalling_~floorID#1); 171058#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 174813#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 174812#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 174811#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 174806#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 174805#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 174804#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 174795#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 174793#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 174775#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 174773#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 174757#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 174750#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 174748#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 174749#L1764-12 assume !(1 == ~currentHeading~0); 175507#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 164196#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 164197#L1780-25 assume { :end_inline_continueInDirection } true; 174684#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 174682#L2945-4 assume !(-1 == ~expectedDirection~0); 174674#L2957-4 assume !(1 == ~expectedDirection~0); 174629#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 173079#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 173078#L2586-2 [2022-11-16 12:19:20,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:20,240 INFO L85 PathProgramCache]: Analyzing trace with hash 1378076285, now seen corresponding path program 1 times [2022-11-16 12:19:20,241 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:20,241 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [177003288] [2022-11-16 12:19:20,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:20,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:20,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:20,402 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:20,403 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:20,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [177003288] [2022-11-16 12:19:20,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [177003288] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:20,403 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:20,403 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:20,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296533048] [2022-11-16 12:19:20,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:20,404 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:20,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:20,405 INFO L85 PathProgramCache]: Analyzing trace with hash 1297430360, now seen corresponding path program 1 times [2022-11-16 12:19:20,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:20,406 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569080025] [2022-11-16 12:19:20,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:20,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:20,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:20,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:20,497 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:20,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569080025] [2022-11-16 12:19:20,498 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569080025] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:20,498 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:20,498 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:20,498 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933104640] [2022-11-16 12:19:20,499 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:20,499 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:20,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:20,499 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:19:20,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:19:20,500 INFO L87 Difference]: Start difference. First operand 19883 states and 37013 transitions. cyclomatic complexity: 17131 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:22,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:22,102 INFO L93 Difference]: Finished difference Result 47085 states and 87465 transitions. [2022-11-16 12:19:22,102 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 47085 states and 87465 transitions. [2022-11-16 12:19:22,246 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17116 [2022-11-16 12:19:22,382 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 47085 states to 47085 states and 87465 transitions. [2022-11-16 12:19:22,383 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47085 [2022-11-16 12:19:22,425 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47085 [2022-11-16 12:19:22,426 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47085 states and 87465 transitions. [2022-11-16 12:19:22,465 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:22,465 INFO L218 hiAutomatonCegarLoop]: Abstraction has 47085 states and 87465 transitions. [2022-11-16 12:19:22,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47085 states and 87465 transitions. [2022-11-16 12:19:23,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47085 to 19883. [2022-11-16 12:19:23,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19883 states, 19883 states have (on average 1.8559070562792335) internal successors, (36901), 19882 states have internal predecessors, (36901), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:23,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19883 states to 19883 states and 36901 transitions. [2022-11-16 12:19:23,263 INFO L240 hiAutomatonCegarLoop]: Abstraction has 19883 states and 36901 transitions. [2022-11-16 12:19:23,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:19:23,266 INFO L428 stractBuchiCegarLoop]: Abstraction has 19883 states and 36901 transitions. [2022-11-16 12:19:23,266 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-16 12:19:23,266 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19883 states and 36901 transitions. [2022-11-16 12:19:23,333 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4470 [2022-11-16 12:19:23,333 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:23,334 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:23,337 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:23,337 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:23,338 INFO L748 eck$LassoCheckResult]: Stem: 230874#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 230875#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 227530#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 225837#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 225838#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 227093#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 227094#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 228409#L247 assume { :end_inline_initFloors } true; 228410#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 229013#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 226471#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 230504#L525 assume 0 == initPersonOnFloor_~floor#1; 231577#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 225236#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 227223#L317 assume !(0 == callOnFloor_~floorID#1); 227225#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 227938#L329-2 assume { :end_inline_callOnFloor } true; 230803#L669 assume { :end_inline_initPersonOnFloor } true; 231799#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 231800#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 231956#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 231957#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 231704#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 231705#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 233279#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 232703#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 232700#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 232699#L254 assume !(0 == isFloorCalling_~floorID#1); 232695#L258 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 232694#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 232693#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 230129#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 228491#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 226176#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 226178#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 234773#L1948 assume !(0 != timeShift_~tmp___9~2#1); 230414#L2039 assume !(1 == ~doorState~0); 230415#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 228866#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 228868#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 232616#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 232591#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 232589#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 232587#L1764 assume !(1 == ~currentHeading~0); 232581#L1774 assume !(0 == ~currentFloorID~0); 232580#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 232579#L1780-1 assume { :end_inline_continueInDirection } true; 232576#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 232574#L2945 assume !(-1 == ~expectedDirection~0); 232571#L2957 assume !(1 == ~expectedDirection~0); 232568#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 232566#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 232565#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 232564#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 232558#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 232559#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 232369#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 225975#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 225976#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 228932#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 231033#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 228679#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 226171#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 231384#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 228609#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 226701#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 226702#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 228737#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 234791#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 231092#L2039-3 assume !(1 == ~doorState~0); 231093#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 230180#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 230181#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 226038#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 226977#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 226978#L1764-3 assume !(1 == ~currentHeading~0); 231630#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 226102#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 226915#L1780-7 assume { :end_inline_continueInDirection } true; 227725#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 234925#L2945-1 assume !(-1 == ~expectedDirection~0); 234922#L2957-1 assume !(1 == ~expectedDirection~0); 234920#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 234919#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 234918#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 234917#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 234915#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 234916#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 234914#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 234913#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 234912#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 234883#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 234877#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 234872#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 234873#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 234865#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 234866#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 225301#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 225302#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 231344#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 231670#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 225649#L2039-6 assume !(1 == ~doorState~0); 225650#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 227824#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 230511#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 225372#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 231316#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 231806#L1764-6 assume !(1 == ~currentHeading~0); 234780#L1774-18 assume !(0 == ~currentFloorID~0); 228926#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 229448#L1780-13 assume { :end_inline_continueInDirection } true; 229449#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 235848#L2945-2 assume !(-1 == ~expectedDirection~0); 235846#L2957-2 assume !(1 == ~expectedDirection~0); 235844#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 235843#L2071-2 assume { :end_inline_timeShift } true; 235841#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 235842#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 236714#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 236713#L525-1 assume 0 == initPersonOnFloor_~floor#1; 235824#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 235800#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 235795#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 235793#L329-5 assume { :end_inline_callOnFloor } true; 235788#L669-1 assume { :end_inline_initPersonOnFloor } true; 235789#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 236681#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 235748#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 235749#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 226504#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 226505#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 226622#L1222-33 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 225884#L2819-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 225429#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 234746#L254-63 assume !(0 == isFloorCalling_~floorID#1); 234747#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 234739#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 234740#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 229523#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 225988#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 228874#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 231977#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 234782#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 229195#L2039-9 assume !(1 == ~doorState~0); 229196#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 230487#L1388-6 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 229406#L828-15 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 229407#L1392-6 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 225252#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 227226#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 227228#L1764-9 assume !(1 == ~currentHeading~0); 239146#L1774-27 assume !(0 == ~currentFloorID~0); 239144#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230614#L1780-19 assume { :end_inline_continueInDirection } true; 228743#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 226958#L2945-3 assume !(-1 == ~expectedDirection~0); 226959#L2957-3 assume !(1 == ~expectedDirection~0); 227635#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 228917#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 229420#L2586-2 [2022-11-16 12:19:23,339 INFO L750 eck$LassoCheckResult]: Loop: 229420#L2586-2 assume !false; 229660#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 226441#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 226188#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 226189#L2594 assume 1 != cleanup_~tmp___0~8#1; 228965#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 229352#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 235780#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 235781#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 235777#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 240835#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 240832#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 240831#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 240830#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 240826#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 240520#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 229183#L1201-44 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 241033#L1222-44 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 228019#L2819-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 225329#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 226426#L254-89 assume !(0 == isFloorCalling_~floorID#1); 226427#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 228381#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 230155#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 227369#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 227022#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 226237#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 226238#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 241345#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 231529#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 231309#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 231310#L1388-8 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 228938#L828-20 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 226719#L1392-8 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 225811#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 227173#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 227373#L1764-12 assume !(1 == ~currentHeading~0); 240659#L1774-36 assume !(0 == ~currentFloorID~0); 240655#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 231918#L1780-25 assume { :end_inline_continueInDirection } true; 228165#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 228166#L2945-4 assume !(-1 == ~expectedDirection~0); 229656#L2957-4 assume !(1 == ~expectedDirection~0); 229113#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 231011#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 229420#L2586-2 [2022-11-16 12:19:23,340 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:23,341 INFO L85 PathProgramCache]: Analyzing trace with hash -1329316883, now seen corresponding path program 1 times [2022-11-16 12:19:23,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:23,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [159922942] [2022-11-16 12:19:23,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:23,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:23,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:23,515 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:23,516 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:23,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [159922942] [2022-11-16 12:19:23,516 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [159922942] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:23,516 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:23,517 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:23,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1497109033] [2022-11-16 12:19:23,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:23,524 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:23,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:23,526 INFO L85 PathProgramCache]: Analyzing trace with hash 1216752666, now seen corresponding path program 1 times [2022-11-16 12:19:23,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:23,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1755835120] [2022-11-16 12:19:23,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:23,527 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:23,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:23,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:23,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:23,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1755835120] [2022-11-16 12:19:23,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1755835120] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:23,619 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:23,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:19:23,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873404500] [2022-11-16 12:19:23,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:23,620 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:23,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:23,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:19:23,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:19:23,622 INFO L87 Difference]: Start difference. First operand 19883 states and 36901 transitions. cyclomatic complexity: 17019 Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 6 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:28,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:28,872 INFO L93 Difference]: Finished difference Result 38999 states and 71987 transitions. [2022-11-16 12:19:28,872 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38999 states and 71987 transitions. [2022-11-16 12:19:29,064 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9322 [2022-11-16 12:19:29,138 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38999 states to 38999 states and 71987 transitions. [2022-11-16 12:19:29,138 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38999 [2022-11-16 12:19:29,163 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38999 [2022-11-16 12:19:29,163 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38999 states and 71987 transitions. [2022-11-16 12:19:29,198 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:29,198 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38999 states and 71987 transitions. [2022-11-16 12:19:29,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38999 states and 71987 transitions. [2022-11-16 12:19:29,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38999 to 27151. [2022-11-16 12:19:29,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27151 states, 27151 states have (on average 1.8479245699974218) internal successors, (50173), 27150 states have internal predecessors, (50173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:29,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27151 states to 27151 states and 50173 transitions. [2022-11-16 12:19:29,728 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27151 states and 50173 transitions. [2022-11-16 12:19:29,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 12:19:29,730 INFO L428 stractBuchiCegarLoop]: Abstraction has 27151 states and 50173 transitions. [2022-11-16 12:19:29,730 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-11-16 12:19:29,730 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27151 states and 50173 transitions. [2022-11-16 12:19:29,823 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6394 [2022-11-16 12:19:29,824 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:29,824 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:29,829 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:29,830 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:29,831 INFO L748 eck$LassoCheckResult]: Stem: 289800#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 289801#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 286433#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 284743#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 284744#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 285989#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 285990#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 287308#L247 assume { :end_inline_initFloors } true; 287309#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 287924#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 285369#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 289415#L525 assume 0 == initPersonOnFloor_~floor#1; 290501#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 284147#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 286122#L317 assume !(0 == callOnFloor_~floorID#1); 286124#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 286843#L329-2 assume { :end_inline_callOnFloor } true; 295158#L669 assume { :end_inline_initPersonOnFloor } true; 295157#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 295156#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 295155#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 295154#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 290644#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 290645#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 284688#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 284689#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 284197#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 284198#L254 assume !(0 == isFloorCalling_~floorID#1); 289678#L258 assume !(1 == isFloorCalling_~floorID#1); 289679#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 287383#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 287384#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 289036#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 288073#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 285074#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 285076#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 290940#L1948 assume !(0 != timeShift_~tmp___9~2#1); 290941#L2039 assume !(1 == ~doorState~0); 290926#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 290927#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 295100#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 285060#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 284543#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 285198#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 285200#L1764 assume !(1 == ~currentHeading~0); 287171#L1774 assume !(0 == ~currentFloorID~0); 290426#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290300#L1780-1 assume { :end_inline_continueInDirection } true; 289149#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 296349#L2945 assume !(-1 == ~expectedDirection~0); 285682#L2957 assume !(1 == ~expectedDirection~0); 285683#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 290920#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 296263#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 289722#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 289723#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 296258#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 296251#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 296234#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 296228#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 296220#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 296219#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 296213#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 296208#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 296204#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 296206#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 296209#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 296207#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 296202#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 296203#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 296656#L2039-3 assume !(1 == ~doorState~0); 296648#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 296641#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 296625#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 296620#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 296618#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 296619#L1764-3 assume !(1 == ~currentHeading~0); 311175#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 285001#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 285810#L1780-7 assume { :end_inline_continueInDirection } true; 286630#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 295429#L2945-1 assume !(-1 == ~expectedDirection~0); 295426#L2957-1 assume !(1 == ~expectedDirection~0); 295424#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 295423#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 295422#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 295421#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 295419#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 295408#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 295403#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 295401#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 295399#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 295374#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 295366#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 295363#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 295360#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 295359#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 295356#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 295353#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 295351#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 295350#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 295345#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 295341#L2039-6 assume !(1 == ~doorState~0); 295337#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 295326#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 295320#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 295303#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 295301#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 295302#L1764-6 assume !(1 == ~currentHeading~0); 304082#L1774-18 assume !(0 == ~currentFloorID~0); 285792#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 285793#L1780-13 assume { :end_inline_continueInDirection } true; 288356#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 296970#L2945-2 assume !(-1 == ~expectedDirection~0); 296966#L2957-2 assume !(1 == ~expectedDirection~0); 296958#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 296954#L2071-2 assume { :end_inline_timeShift } true; 296892#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 296891#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 296885#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 296884#L525-1 assume 0 == initPersonOnFloor_~floor#1; 296874#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 296849#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 292972#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 292969#L329-5 assume { :end_inline_callOnFloor } true; 292968#L669-1 assume { :end_inline_initPersonOnFloor } true; 292966#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 292967#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 309792#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 309787#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 309785#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 309781#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 309778#L1222-38 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 309765#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 309761#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 309760#L254-63 assume !(0 == isFloorCalling_~floorID#1); 309758#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 309755#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 285864#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 285865#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 284892#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 290930#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 287270#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 287271#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 288105#L2039-9 assume !(1 == ~doorState~0); 288106#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 289398#L1388-6 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 288317#L828-15 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 288318#L1392-6 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 284163#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 286125#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 286127#L1764-9 assume !(1 == ~currentHeading~0); 288824#L1774-27 assume !(0 == ~currentFloorID~0); 284996#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 284997#L1780-19 assume { :end_inline_continueInDirection } true; 291311#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 291308#L2945-3 assume !(-1 == ~expectedDirection~0); 291302#L2957-3 assume !(1 == ~expectedDirection~0); 291297#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 291295#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 291293#L2586-2 [2022-11-16 12:19:29,832 INFO L750 eck$LassoCheckResult]: Loop: 291293#L2586-2 assume !false; 291292#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 291291#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 291290#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 291288#L2594 assume 1 != cleanup_~tmp___0~8#1; 291289#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 310966#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 310967#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 310946#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 310942#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 310941#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 310940#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 310939#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 310938#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 310937#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 310935#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 310922#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 310918#L1222-49 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 310912#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 310911#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 285323#L254-89 assume !(0 == isFloorCalling_~floorID#1); 285324#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 288913#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 289061#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 286273#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 285918#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 285135#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 285136#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 311290#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 290457#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 290252#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 290253#L1388-8 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 287843#L828-20 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 285609#L1392-8 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 284717#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 286071#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 286277#L1764-12 assume !(1 == ~currentHeading~0); 290359#L1774-36 assume !(0 == ~currentFloorID~0); 292114#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 291314#L1780-25 assume { :end_inline_continueInDirection } true; 291310#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 291305#L2945-4 assume !(-1 == ~expectedDirection~0); 291299#L2957-4 assume !(1 == ~expectedDirection~0); 291296#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 291294#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 291293#L2586-2 [2022-11-16 12:19:29,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:29,833 INFO L85 PathProgramCache]: Analyzing trace with hash -964850039, now seen corresponding path program 1 times [2022-11-16 12:19:29,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:29,834 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1582367838] [2022-11-16 12:19:29,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:29,834 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:29,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:29,969 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:29,969 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:29,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1582367838] [2022-11-16 12:19:29,969 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1582367838] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:29,970 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:29,970 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:29,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238608765] [2022-11-16 12:19:29,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:29,971 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:29,971 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:29,971 INFO L85 PathProgramCache]: Analyzing trace with hash 457162591, now seen corresponding path program 1 times [2022-11-16 12:19:29,971 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:29,971 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [327452639] [2022-11-16 12:19:29,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:29,972 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:29,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:30,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:30,026 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:30,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [327452639] [2022-11-16 12:19:30,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [327452639] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:30,027 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:30,027 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:19:30,027 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [818996062] [2022-11-16 12:19:30,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:30,028 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:30,028 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:30,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:19:30,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:19:30,029 INFO L87 Difference]: Start difference. First operand 27151 states and 50173 transitions. cyclomatic complexity: 23023 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:37,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:37,079 INFO L93 Difference]: Finished difference Result 64569 states and 119747 transitions. [2022-11-16 12:19:37,079 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64569 states and 119747 transitions. [2022-11-16 12:19:37,273 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16540 [2022-11-16 12:19:37,407 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64569 states to 64569 states and 119747 transitions. [2022-11-16 12:19:37,407 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64569 [2022-11-16 12:19:37,448 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64569 [2022-11-16 12:19:37,449 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64569 states and 119747 transitions. [2022-11-16 12:19:37,475 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:37,475 INFO L218 hiAutomatonCegarLoop]: Abstraction has 64569 states and 119747 transitions. [2022-11-16 12:19:37,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64569 states and 119747 transitions. [2022-11-16 12:19:38,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64569 to 26579. [2022-11-16 12:19:38,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26579 states, 26579 states have (on average 1.8490913879378457) internal successors, (49147), 26578 states have internal predecessors, (49147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:38,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26579 states to 26579 states and 49147 transitions. [2022-11-16 12:19:38,244 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26579 states and 49147 transitions. [2022-11-16 12:19:38,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:19:38,246 INFO L428 stractBuchiCegarLoop]: Abstraction has 26579 states and 49147 transitions. [2022-11-16 12:19:38,246 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-11-16 12:19:38,246 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26579 states and 49147 transitions. [2022-11-16 12:19:38,308 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6251 [2022-11-16 12:19:38,308 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:38,308 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:38,311 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:38,311 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:38,312 INFO L748 eck$LassoCheckResult]: Stem: 381368#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 381369#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 378161#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 376480#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 376481#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 377731#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 377732#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 379017#L247 assume { :end_inline_initFloors } true; 379018#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 379607#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 377113#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 381022#L525 assume 0 == initPersonOnFloor_~floor#1; 382003#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 375889#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 377860#L317 assume !(0 == callOnFloor_~floorID#1); 377862#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 378555#L329-2 assume { :end_inline_callOnFloor } true; 381301#L669 assume { :end_inline_initPersonOnFloor } true; 382178#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 382179#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 382292#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 382293#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 382595#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 381765#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 376431#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 376432#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 375939#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 375940#L254 assume !(0 == isFloorCalling_~floorID#1); 381257#L258 assume !(1 == isFloorCalling_~floorID#1); 381258#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 379094#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 376194#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 376196#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 380670#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 382488#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 382487#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 382486#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 382485#L1948 assume !(0 != timeShift_~tmp___9~2#1); 382484#L2039 assume !(1 == ~doorState~0); 382483#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 382481#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 382480#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 376802#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 376283#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 382456#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 382399#L1764 assume !(1 == ~currentHeading~0); 382395#L1774 assume !(0 == ~currentFloorID~0); 380491#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 380492#L1780-1 assume { :end_inline_continueInDirection } true; 382392#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 382390#L2945 assume !(-1 == ~expectedDirection~0); 382387#L2957 assume !(1 == ~expectedDirection~0); 382384#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 382378#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 382376#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 382375#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 382373#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 382372#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 382371#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 382354#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 382348#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 382340#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 382339#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 382338#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 382337#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 382335#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 382332#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 382333#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 390000#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 389994#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 389992#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 381580#L2039-3 assume !(1 == ~doorState~0); 381581#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 380716#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 380717#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 401399#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 401397#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 401398#L1764-3 assume !(1 == ~currentHeading~0); 401571#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 376743#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 377552#L1780-7 assume { :end_inline_continueInDirection } true; 388457#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 388458#L2945-1 assume !(-1 == ~expectedDirection~0); 388447#L2957-1 assume !(1 == ~expectedDirection~0); 388446#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 388441#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 388442#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 388437#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 388438#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 397518#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 388436#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 388432#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 388428#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 388396#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 387988#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 387987#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 387986#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 387978#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 387979#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 387981#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 387980#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 387977#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 387973#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 387974#L2039-6 assume !(1 == ~doorState~0); 401138#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 381029#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 381030#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 401102#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 401100#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 401099#L1764-6 assume !(1 == ~currentHeading~0); 401098#L1774-18 assume !(0 == ~currentFloorID~0); 377537#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 377538#L1780-13 assume { :end_inline_continueInDirection } true; 386543#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 395651#L2945-2 assume !(-1 == ~expectedDirection~0); 395649#L2957-2 assume !(1 == ~expectedDirection~0); 395647#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 395646#L2071-2 assume { :end_inline_timeShift } true; 386529#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 386530#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 395605#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 395603#L525-1 assume 0 == initPersonOnFloor_~floor#1; 386508#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 386484#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 386478#L317-2 assume !(0 == callOnFloor_~floorID#1); 386480#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 386471#L329-5 assume { :end_inline_callOnFloor } true; 386472#L669-1 assume { :end_inline_initPersonOnFloor } true; 386467#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 386468#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 386340#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 386341#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 395489#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 386198#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 386196#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 386185#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 386119#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 385593#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 385592#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 385587#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 385584#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 385585#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 385586#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 385583#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 385581#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 385580#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 379784#L2039-9 assume !(1 == ~doorState~0); 379785#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 381009#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 381010#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 401516#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 401514#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 401515#L1764-9 assume !(1 == ~currentHeading~0); 401570#L1774-27 assume !(0 == ~currentFloorID~0); 376738#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 376739#L1780-19 assume { :end_inline_continueInDirection } true; 382748#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 382749#L2945-3 assume !(-1 == ~expectedDirection~0); 391244#L2957-3 assume !(1 == ~expectedDirection~0); 391242#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 391241#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 391239#L2586-2 [2022-11-16 12:19:38,313 INFO L750 eck$LassoCheckResult]: Loop: 391239#L2586-2 assume !false; 391238#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 391237#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 391236#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 391235#L2594 assume 1 != cleanup_~tmp___0~8#1; 382723#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 382718#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 382704#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 382687#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 382689#L1296 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 382664#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 382665#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 382660#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 382661#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 382656#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 382657#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 382649#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 382648#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 382647#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 382646#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 382611#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 382608#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 382606#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 382605#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 382603#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 382600#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 382601#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 384476#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 384434#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 384430#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 381963#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 381964#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 382259#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 382260#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 401280#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 401278#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 401279#L1764-12 assume !(1 == ~currentHeading~0); 402465#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 380125#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 381651#L1780-25 assume { :end_inline_continueInDirection } true; 382750#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 391253#L2945-4 assume !(-1 == ~expectedDirection~0); 391250#L2957-4 assume !(1 == ~expectedDirection~0); 391248#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 391240#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 391239#L2586-2 [2022-11-16 12:19:38,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:38,313 INFO L85 PathProgramCache]: Analyzing trace with hash 402995937, now seen corresponding path program 1 times [2022-11-16 12:19:38,314 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:38,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1900062928] [2022-11-16 12:19:38,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:38,314 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:38,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:38,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:38,641 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:38,641 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1900062928] [2022-11-16 12:19:38,641 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1900062928] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:38,641 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:38,642 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:38,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111504319] [2022-11-16 12:19:38,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:38,642 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:38,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:38,643 INFO L85 PathProgramCache]: Analyzing trace with hash -606312312, now seen corresponding path program 1 times [2022-11-16 12:19:38,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:38,643 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1607391692] [2022-11-16 12:19:38,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:38,644 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:38,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:38,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:38,685 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:38,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1607391692] [2022-11-16 12:19:38,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1607391692] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:38,688 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:38,688 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:19:38,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [745848235] [2022-11-16 12:19:38,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:38,690 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:38,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:38,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:19:38,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:19:38,691 INFO L87 Difference]: Start difference. First operand 26579 states and 49147 transitions. cyclomatic complexity: 22569 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:42,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:42,192 INFO L93 Difference]: Finished difference Result 130213 states and 242786 transitions. [2022-11-16 12:19:42,192 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130213 states and 242786 transitions. [2022-11-16 12:19:42,903 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32878 [2022-11-16 12:19:43,204 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130213 states to 130213 states and 242786 transitions. [2022-11-16 12:19:43,204 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130213 [2022-11-16 12:19:43,274 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130213 [2022-11-16 12:19:43,274 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130213 states and 242786 transitions. [2022-11-16 12:19:43,323 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:43,323 INFO L218 hiAutomatonCegarLoop]: Abstraction has 130213 states and 242786 transitions. [2022-11-16 12:19:43,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130213 states and 242786 transitions. [2022-11-16 12:19:44,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130213 to 51903. [2022-11-16 12:19:44,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51903 states, 51903 states have (on average 1.8498930697647535) internal successors, (96015), 51902 states have internal predecessors, (96015), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:44,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51903 states to 51903 states and 96015 transitions. [2022-11-16 12:19:44,309 INFO L240 hiAutomatonCegarLoop]: Abstraction has 51903 states and 96015 transitions. [2022-11-16 12:19:44,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:19:44,310 INFO L428 stractBuchiCegarLoop]: Abstraction has 51903 states and 96015 transitions. [2022-11-16 12:19:44,310 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-11-16 12:19:44,310 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 51903 states and 96015 transitions. [2022-11-16 12:19:44,791 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12248 [2022-11-16 12:19:44,792 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:44,792 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:44,818 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:44,818 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:44,819 INFO L748 eck$LassoCheckResult]: Stem: 538300#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 538301#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 534985#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 533295#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 533296#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 534548#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 534549#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 535861#L247 assume { :end_inline_initFloors } true; 535862#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 536473#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 533924#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 537924#L525 assume 0 == initPersonOnFloor_~floor#1; 539001#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 532703#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 534676#L317 assume !(0 == callOnFloor_~floorID#1); 534678#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 535388#L329-2 assume { :end_inline_callOnFloor } true; 540221#L669 assume { :end_inline_initPersonOnFloor } true; 540220#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 540219#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 540218#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 540216#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 540217#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 540224#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 540225#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 540183#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 540171#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 540170#L254 assume !(0 == isFloorCalling_~floorID#1); 540169#L258 assume !(1 == isFloorCalling_~floorID#1); 540167#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 540165#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 540164#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 540163#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 540131#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 540130#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 540128#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 540127#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 540126#L1948 assume !(0 != timeShift_~tmp___9~2#1); 540125#L2039 assume !(1 == ~doorState~0); 540124#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 540120#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 534251#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 534252#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 539980#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 539977#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 539972#L1764 assume !(1 == ~currentHeading~0); 539966#L1774 assume !(0 == ~currentFloorID~0); 539961#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 539958#L1780-1 assume { :end_inline_continueInDirection } true; 539955#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 539953#L2945 assume !(-1 == ~expectedDirection~0); 539950#L2957 assume !(1 == ~expectedDirection~0); 539948#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 539947#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 539944#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 539938#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 539933#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 539931#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 539929#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 539911#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 539905#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 539896#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 539895#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 539893#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 539892#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 539890#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 539886#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 539887#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 540541#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 540540#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 540538#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 540537#L2039-3 assume !(1 == ~doorState~0); 540536#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 540534#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 539787#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 539783#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 539755#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 539757#L1764-3 assume !(1 == ~currentHeading~0); 541911#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 541912#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 546584#L1780-7 assume { :end_inline_continueInDirection } true; 546582#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 556375#L2945-1 assume !(-1 == ~expectedDirection~0); 556372#L2957-1 assume !(1 == ~expectedDirection~0); 556370#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 556369#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 556368#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 556367#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 556365#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 556364#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 541684#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 541674#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 541661#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 541618#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 541554#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 541550#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 541549#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 541539#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 541536#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 541533#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 541531#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 541530#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 541528#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 541527#L2039-6 assume !(1 == ~doorState~0); 541526#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 541524#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 541516#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 541517#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 541761#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 541758#L1764-6 assume !(1 == ~currentHeading~0); 541759#L1774-18 assume !(0 == ~currentFloorID~0); 548361#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 548357#L1780-13 assume { :end_inline_continueInDirection } true; 548356#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 556603#L2945-2 assume !(-1 == ~expectedDirection~0); 556601#L2957-2 assume !(1 == ~expectedDirection~0); 556599#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 556598#L2071-2 assume { :end_inline_timeShift } true; 556597#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 556596#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 556590#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 556589#L525-1 assume 0 == initPersonOnFloor_~floor#1; 556469#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 556444#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 556442#L317-2 assume !(0 == callOnFloor_~floorID#1); 556440#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 556437#L329-5 assume { :end_inline_callOnFloor } true; 556436#L669-1 assume { :end_inline_initPersonOnFloor } true; 556435#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 556434#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 556433#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 556431#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 556430#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 541265#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 541260#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 541252#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 541215#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 541047#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 541044#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 541042#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 541039#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 541035#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 541029#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 541030#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 541015#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 541016#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 540995#L2039-9 assume !(1 == ~doorState~0); 540996#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 540967#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 540912#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 540894#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 540884#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 540886#L1764-9 assume !(1 == ~currentHeading~0); 555691#L1774-27 assume !(0 == ~currentFloorID~0); 555682#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 555677#L1780-19 assume { :end_inline_continueInDirection } true; 555673#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 555670#L2945-3 assume !(-1 == ~expectedDirection~0); 555663#L2957-3 assume !(1 == ~expectedDirection~0); 555657#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 555654#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 555651#L2586-2 [2022-11-16 12:19:44,820 INFO L750 eck$LassoCheckResult]: Loop: 555651#L2586-2 assume !false; 555645#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 555639#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 555637#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 555634#L2594 assume 1 != cleanup_~tmp___0~8#1; 555631#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 555617#L254-84 assume !(0 == isFloorCalling_~floorID#1); 555618#L258-84 assume !(1 == isFloorCalling_~floorID#1); 556299#L262-84 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 556292#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 556283#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 556278#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 556277#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 556276#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 556275#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 556274#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 556272#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 556271#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 539565#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 539564#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 539563#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 539528#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 539524#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 539521#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 539519#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 539515#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 539512#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 539513#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 540623#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 540622#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 540620#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 540619#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 540618#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 540613#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 539425#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 539417#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 539412#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 539409#L1764-12 assume !(1 == ~currentHeading~0); 539410#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 555172#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 555169#L1780-25 assume { :end_inline_continueInDirection } true; 555167#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 555667#L2945-4 assume !(-1 == ~expectedDirection~0); 555660#L2957-4 assume !(1 == ~expectedDirection~0); 555656#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 555653#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 555651#L2586-2 [2022-11-16 12:19:44,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:44,821 INFO L85 PathProgramCache]: Analyzing trace with hash 402995937, now seen corresponding path program 2 times [2022-11-16 12:19:44,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:44,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [301822722] [2022-11-16 12:19:44,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:44,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:44,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:44,993 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:44,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:44,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [301822722] [2022-11-16 12:19:44,994 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [301822722] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:44,994 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:44,995 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:44,995 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [124715005] [2022-11-16 12:19:44,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:44,996 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:44,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:44,996 INFO L85 PathProgramCache]: Analyzing trace with hash -2008263925, now seen corresponding path program 1 times [2022-11-16 12:19:44,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:44,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167977552] [2022-11-16 12:19:44,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:44,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:45,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:45,032 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:45,033 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:45,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167977552] [2022-11-16 12:19:45,033 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167977552] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:45,033 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:45,034 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:19:45,034 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659761940] [2022-11-16 12:19:45,034 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:45,034 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:45,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:45,035 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:19:45,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:19:45,035 INFO L87 Difference]: Start difference. First operand 51903 states and 96015 transitions. cyclomatic complexity: 44113 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:46,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:46,466 INFO L93 Difference]: Finished difference Result 57455 states and 105715 transitions. [2022-11-16 12:19:46,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57455 states and 105715 transitions. [2022-11-16 12:19:47,094 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13306 [2022-11-16 12:19:47,244 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57455 states to 57455 states and 105715 transitions. [2022-11-16 12:19:47,244 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57455 [2022-11-16 12:19:47,277 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57455 [2022-11-16 12:19:47,277 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57455 states and 105715 transitions. [2022-11-16 12:19:47,302 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:47,302 INFO L218 hiAutomatonCegarLoop]: Abstraction has 57455 states and 105715 transitions. [2022-11-16 12:19:47,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57455 states and 105715 transitions. [2022-11-16 12:19:47,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57455 to 51903. [2022-11-16 12:19:47,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51903 states, 51903 states have (on average 1.8445754580660076) internal successors, (95739), 51902 states have internal predecessors, (95739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:48,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51903 states to 51903 states and 95739 transitions. [2022-11-16 12:19:48,236 INFO L240 hiAutomatonCegarLoop]: Abstraction has 51903 states and 95739 transitions. [2022-11-16 12:19:48,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:19:48,237 INFO L428 stractBuchiCegarLoop]: Abstraction has 51903 states and 95739 transitions. [2022-11-16 12:19:48,237 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-11-16 12:19:48,237 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 51903 states and 95739 transitions. [2022-11-16 12:19:48,346 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12248 [2022-11-16 12:19:48,346 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:48,346 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:48,348 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:48,349 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:48,349 INFO L748 eck$LassoCheckResult]: Stem: 647635#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 647636#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 644340#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 642657#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 642658#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 643908#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 643909#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 645205#L247 assume { :end_inline_initFloors } true; 645206#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 645812#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 643293#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 647273#L525 assume 0 == initPersonOnFloor_~floor#1; 648335#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 642069#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 644038#L317 assume !(0 == callOnFloor_~floorID#1); 644040#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 644741#L329-2 assume { :end_inline_callOnFloor } true; 649146#L669 assume { :end_inline_initPersonOnFloor } true; 649145#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 649144#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 649143#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 649141#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 649142#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 649151#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 649147#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 649121#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 649109#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 649108#L254 assume !(0 == isFloorCalling_~floorID#1); 649107#L258 assume !(1 == isFloorCalling_~floorID#1); 649105#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 649103#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 649102#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 649101#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 648239#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 645283#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 642993#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 642995#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 648724#L1948 assume !(0 != timeShift_~tmp___9~2#1); 647183#L2039 assume !(1 == ~doorState~0); 647184#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 645663#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 643614#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 643615#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 649047#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 649044#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 649042#L1764 assume !(1 == ~currentHeading~0); 649036#L1774 assume !(0 == ~currentFloorID~0); 649035#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 649034#L1780-1 assume { :end_inline_continueInDirection } true; 649031#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 649029#L2945 assume !(-1 == ~expectedDirection~0); 649026#L2957 assume !(1 == ~expectedDirection~0); 649024#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 649023#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 649022#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 649021#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 649019#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 649020#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 649008#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 648972#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 648960#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 648942#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 648935#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 648933#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 648932#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 648930#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 648926#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 648927#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 651732#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 651731#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 651729#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 648893#L2039-3 assume !(1 == ~doorState~0); 648894#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 648862#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 648863#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 648837#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 648838#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 652912#L1764-3 assume !(1 == ~currentHeading~0); 649818#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 649792#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 649782#L1780-7 assume { :end_inline_continueInDirection } true; 649779#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 649770#L2945-1 assume !(-1 == ~expectedDirection~0); 649764#L2957-1 assume !(1 == ~expectedDirection~0); 649761#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 649759#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 649757#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 649755#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 649747#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 649749#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 649700#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 649698#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 649678#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 649663#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 649649#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 649648#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 649647#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 649646#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 649643#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 649641#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 649634#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 649635#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 649620#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 649621#L2039-6 assume !(1 == ~doorState~0); 649602#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 649603#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 649567#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 649549#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 649550#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 658075#L1764-6 assume !(1 == ~currentHeading~0); 675314#L1774-18 assume !(0 == ~currentFloorID~0); 675312#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 675290#L1780-13 assume { :end_inline_continueInDirection } true; 675288#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 675285#L2945-2 assume !(-1 == ~expectedDirection~0); 675283#L2957-2 assume !(1 == ~expectedDirection~0); 675281#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 675280#L2071-2 assume { :end_inline_timeShift } true; 675279#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 675278#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 675272#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 675271#L525-1 assume 0 == initPersonOnFloor_~floor#1; 675252#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 675196#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 675189#L317-2 assume !(0 == callOnFloor_~floorID#1); 675190#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 692719#L329-5 assume { :end_inline_callOnFloor } true; 692718#L669-1 assume { :end_inline_initPersonOnFloor } true; 692717#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 692715#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 692713#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 692710#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 692705#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 658506#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 658501#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 658479#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 658461#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 658445#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 658443#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 658442#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 658440#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 658437#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 658431#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 658432#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 660914#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 658079#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 658080#L2039-9 assume !(1 == ~doorState~0); 658076#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 647251#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 647252#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 661713#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 661711#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 658030#L1764-9 assume !(1 == ~currentHeading~0); 658023#L1774-27 assume !(0 == ~currentFloorID~0); 642920#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 642921#L1780-19 assume { :end_inline_continueInDirection } true; 693612#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 693610#L2945-3 assume !(-1 == ~expectedDirection~0); 693607#L2957-3 assume !(1 == ~expectedDirection~0); 693601#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 693597#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 693539#L2586-2 [2022-11-16 12:19:48,350 INFO L750 eck$LassoCheckResult]: Loop: 693539#L2586-2 assume !false; 693506#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 693363#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 690563#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 690540#L2594 assume 1 != cleanup_~tmp___0~8#1; 685748#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 685747#L254-84 assume !(0 == isFloorCalling_~floorID#1); 685746#L258-84 assume !(1 == isFloorCalling_~floorID#1); 685745#L262-84 assume !(2 == isFloorCalling_~floorID#1); 685680#L266-84 assume !(3 == isFloorCalling_~floorID#1); 685679#L270-84 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~0#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 685675#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 685632#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 685626#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 685624#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 685622#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 685620#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 685618#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 685614#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 685613#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 676068#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 676063#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 676060#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 676038#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 676007#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 676002#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 676000#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 675991#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 675989#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 675983#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 675981#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 675980#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 675977#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 675978#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 690548#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 675972#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 675973#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 690511#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 690509#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 690508#L1764-12 assume !(1 == ~currentHeading~0); 658007#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 646333#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 647936#L1780-25 assume { :end_inline_continueInDirection } true; 644972#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 644973#L2945-4 assume !(-1 == ~expectedDirection~0); 646449#L2957-4 assume !(1 == ~expectedDirection~0); 645910#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 693596#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 693539#L2586-2 [2022-11-16 12:19:48,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:48,350 INFO L85 PathProgramCache]: Analyzing trace with hash 402995937, now seen corresponding path program 3 times [2022-11-16 12:19:48,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:48,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [32346576] [2022-11-16 12:19:48,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:48,351 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:48,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:48,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:48,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:48,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [32346576] [2022-11-16 12:19:48,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [32346576] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:48,468 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:48,468 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:48,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1014535029] [2022-11-16 12:19:48,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:48,469 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:48,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:48,470 INFO L85 PathProgramCache]: Analyzing trace with hash -298692348, now seen corresponding path program 1 times [2022-11-16 12:19:48,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:48,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [945631986] [2022-11-16 12:19:48,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:48,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:48,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:48,498 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:48,498 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:48,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [945631986] [2022-11-16 12:19:48,499 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [945631986] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:48,499 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:48,499 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:48,499 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [217176422] [2022-11-16 12:19:48,499 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:48,500 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:48,500 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:48,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:19:48,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:19:48,500 INFO L87 Difference]: Start difference. First operand 51903 states and 95739 transitions. cyclomatic complexity: 43837 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:50,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:50,368 INFO L93 Difference]: Finished difference Result 102621 states and 189837 transitions. [2022-11-16 12:19:50,368 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 102621 states and 189837 transitions. [2022-11-16 12:19:50,706 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 35244 [2022-11-16 12:19:51,391 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 102621 states to 102621 states and 189837 transitions. [2022-11-16 12:19:51,391 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 102621 [2022-11-16 12:19:51,461 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 102621 [2022-11-16 12:19:51,461 INFO L73 IsDeterministic]: Start isDeterministic. Operand 102621 states and 189837 transitions. [2022-11-16 12:19:51,513 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:51,513 INFO L218 hiAutomatonCegarLoop]: Abstraction has 102621 states and 189837 transitions. [2022-11-16 12:19:51,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102621 states and 189837 transitions. [2022-11-16 12:19:52,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102621 to 51903. [2022-11-16 12:19:52,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51903 states, 51903 states have (on average 1.844267190721153) internal successors, (95723), 51902 states have internal predecessors, (95723), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:52,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51903 states to 51903 states and 95723 transitions. [2022-11-16 12:19:52,367 INFO L240 hiAutomatonCegarLoop]: Abstraction has 51903 states and 95723 transitions. [2022-11-16 12:19:52,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:19:52,368 INFO L428 stractBuchiCegarLoop]: Abstraction has 51903 states and 95723 transitions. [2022-11-16 12:19:52,368 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-11-16 12:19:52,369 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 51903 states and 95723 transitions. [2022-11-16 12:19:52,977 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12248 [2022-11-16 12:19:52,977 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:52,977 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:52,994 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:53,006 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:53,008 INFO L748 eck$LassoCheckResult]: Stem: 802267#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 802268#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 798899#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 797194#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 797195#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 798456#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 798457#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 799770#L247 assume { :end_inline_initFloors } true; 799771#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 800397#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 797833#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 801879#L525 assume 0 == initPersonOnFloor_~floor#1; 803040#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 796605#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 798585#L317 assume !(0 == callOnFloor_~floorID#1); 798587#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 799301#L329-2 assume { :end_inline_callOnFloor } true; 807653#L669 assume { :end_inline_initPersonOnFloor } true; 807652#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 807651#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 807650#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 807648#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 807647#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 802731#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 802732#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 798139#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 797757#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 802612#L254 assume !(0 == isFloorCalling_~floorID#1); 802613#L258 assume !(1 == isFloorCalling_~floorID#1); 801816#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 797462#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 796909#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 796911#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 801513#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 799851#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 797530#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 797531#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 803501#L1948 assume !(0 != timeShift_~tmp___9~2#1); 801792#L2039 assume !(1 == ~doorState~0); 801793#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 800242#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 800244#L828 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 797520#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 796998#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 807410#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 807405#L1764 assume !(1 == ~currentHeading~0); 807401#L1774 assume !(0 == ~currentFloorID~0); 807399#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 807397#L1780-1 assume { :end_inline_continueInDirection } true; 807394#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 807261#L2945 assume !(-1 == ~expectedDirection~0); 807256#L2957 assume !(1 == ~expectedDirection~0); 807252#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 807250#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 807245#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 807243#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 807241#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 807239#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 807237#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 807235#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 807187#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 807058#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 805477#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 805475#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 805470#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 805465#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 805466#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 805469#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 805467#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 805468#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 805455#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 805456#L2039-3 assume !(1 == ~doorState~0); 806827#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 806825#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 806810#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 806702#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 806696#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 806688#L1764-3 assume !(1 == ~currentHeading~0); 803714#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 803687#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 803677#L1780-7 assume { :end_inline_continueInDirection } true; 803672#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 803670#L2945-1 assume !(-1 == ~expectedDirection~0); 803667#L2957-1 assume !(1 == ~expectedDirection~0); 803665#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 803664#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 803663#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 803662#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 803660#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 803661#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 803656#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 803645#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 803630#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 803624#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 803618#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 803617#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 803616#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 803615#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 803612#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 803609#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 803607#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 803606#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 803604#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 803603#L2039-6 assume !(1 == ~doorState~0); 803602#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 803600#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 803594#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 803562#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 803561#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 803192#L1764-6 assume !(1 == ~currentHeading~0); 803193#L1774-18 assume !(0 == ~currentFloorID~0); 811319#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 811308#L1780-13 assume { :end_inline_continueInDirection } true; 811306#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 811303#L2945-2 assume !(-1 == ~expectedDirection~0); 811301#L2957-2 assume !(1 == ~expectedDirection~0); 811299#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 811298#L2071-2 assume { :end_inline_timeShift } true; 811297#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 811296#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 811290#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 811289#L525-1 assume 0 == initPersonOnFloor_~floor#1; 811279#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 811254#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 811252#L317-2 assume !(0 == callOnFloor_~floorID#1); 811250#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 811247#L329-5 assume { :end_inline_callOnFloor } true; 811246#L669-1 assume { :end_inline_initPersonOnFloor } true; 811245#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 811244#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 811243#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 811242#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 811237#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 811233#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 811230#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 811224#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 811163#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 811068#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 811066#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 811065#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 811064#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 811061#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 811058#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 811056#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 811055#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 811053#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 811052#L2039-9 assume !(1 == ~doorState~0); 811051#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 811049#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 811027#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 811007#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 811008#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 814785#L1764-9 assume !(1 == ~currentHeading~0); 810939#L1774-27 assume !(0 == ~currentFloorID~0); 797455#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 797456#L1780-19 assume { :end_inline_continueInDirection } true; 836637#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 836634#L2945-3 assume !(-1 == ~expectedDirection~0); 836628#L2957-3 assume !(1 == ~expectedDirection~0); 836623#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 836621#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 836309#L2586-2 [2022-11-16 12:19:53,011 INFO L750 eck$LassoCheckResult]: Loop: 836309#L2586-2 assume !false; 836307#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 836184#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 836172#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 835959#L2594 assume 1 != cleanup_~tmp___0~8#1; 819923#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 819924#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 836431#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 836432#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 836422#L1296 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 836423#L254-85 assume !(0 == isFloorCalling_~floorID#1); 819909#L258-85 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 819907#L281-85 anyStopRequested_#t~ret12#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret12#1;havoc anyStopRequested_#t~ret12#1; 819892#L1303 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 819884#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 819882#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 819883#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 836897#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 836895#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 836892#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 836888#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 819607#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 819571#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 819556#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 819539#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 819529#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 819527#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 819526#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 819524#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 819522#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 819515#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 819516#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 819510#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 819511#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 819505#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 819506#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 819498#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 819499#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 819476#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 819473#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 819474#L1764-12 assume !(1 == ~currentHeading~0); 819090#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 819091#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 836640#L1780-25 assume { :end_inline_continueInDirection } true; 836636#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 836631#L2945-4 assume !(-1 == ~expectedDirection~0); 836625#L2957-4 assume !(1 == ~expectedDirection~0); 836622#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 836620#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 836309#L2586-2 [2022-11-16 12:19:53,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:53,012 INFO L85 PathProgramCache]: Analyzing trace with hash 402995937, now seen corresponding path program 4 times [2022-11-16 12:19:53,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:53,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [460587958] [2022-11-16 12:19:53,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:53,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:53,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:53,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:53,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:53,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [460587958] [2022-11-16 12:19:53,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [460587958] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:53,145 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:53,145 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:53,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1997224234] [2022-11-16 12:19:53,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:53,146 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:53,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:53,147 INFO L85 PathProgramCache]: Analyzing trace with hash -1358270912, now seen corresponding path program 1 times [2022-11-16 12:19:53,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:53,147 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998425488] [2022-11-16 12:19:53,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:53,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:53,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:53,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:53,179 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:53,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998425488] [2022-11-16 12:19:53,179 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998425488] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:53,179 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:53,180 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:53,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1682910246] [2022-11-16 12:19:53,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:53,180 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:53,180 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:53,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:19:53,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:19:53,181 INFO L87 Difference]: Start difference. First operand 51903 states and 95723 transitions. cyclomatic complexity: 43821 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:53,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:53,993 INFO L93 Difference]: Finished difference Result 95639 states and 176799 transitions. [2022-11-16 12:19:53,993 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95639 states and 176799 transitions. [2022-11-16 12:19:54,806 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23436 [2022-11-16 12:19:55,021 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95639 states to 95639 states and 176799 transitions. [2022-11-16 12:19:55,021 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 95639 [2022-11-16 12:19:55,081 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 95639 [2022-11-16 12:19:55,081 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95639 states and 176799 transitions. [2022-11-16 12:19:55,122 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:55,122 INFO L218 hiAutomatonCegarLoop]: Abstraction has 95639 states and 176799 transitions. [2022-11-16 12:19:55,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95639 states and 176799 transitions. [2022-11-16 12:19:55,965 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95639 to 51955. [2022-11-16 12:19:56,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51955 states, 51955 states have (on average 1.8434221922817824) internal successors, (95775), 51954 states have internal predecessors, (95775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:56,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51955 states to 51955 states and 95775 transitions. [2022-11-16 12:19:56,082 INFO L240 hiAutomatonCegarLoop]: Abstraction has 51955 states and 95775 transitions. [2022-11-16 12:19:56,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:19:56,083 INFO L428 stractBuchiCegarLoop]: Abstraction has 51955 states and 95775 transitions. [2022-11-16 12:19:56,083 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-11-16 12:19:56,083 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 51955 states and 95775 transitions. [2022-11-16 12:19:56,205 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12260 [2022-11-16 12:19:56,205 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:19:56,205 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:19:56,208 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:56,208 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:19:56,208 INFO L748 eck$LassoCheckResult]: Stem: 949821#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 949822#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 946443#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 944748#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 944749#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 946006#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 946007#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 947323#L247 assume { :end_inline_initFloors } true; 947324#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 947942#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 945387#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 949435#L525 assume 0 == initPersonOnFloor_~floor#1; 950582#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 944159#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 946136#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 946137#L329-2 assume { :end_inline_callOnFloor } true; 946718#L669 assume { :end_inline_initPersonOnFloor } true; 946719#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 946299#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 946300#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 949459#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 949460#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 950274#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 950275#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 945690#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 944209#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 944210#L254 assume !(0 == isFloorCalling_~floorID#1); 949698#L258 assume !(1 == isFloorCalling_~floorID#1); 949367#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 945017#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 944463#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 944465#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 949054#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 947403#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 945087#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 945088#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 951055#L1948 assume !(0 != timeShift_~tmp___9~2#1); 949343#L2039 assume !(1 == ~doorState~0); 949344#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 947790#L1388 assume !(1 == stopRequestedInDirection_~dir#1); 947791#L1557 assume !(0 == ~currentFloorID~0); 948042#L1563 assume !(~currentFloorID~0 > 0); 948043#L1578 assume ~currentFloorID~0 > 0; 949569#L1580 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 949571#L1581 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 949048#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 945210#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 945212#L1764 assume !(1 == ~currentHeading~0); 950721#L1774 assume !(0 == ~currentFloorID~0); 950508#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 950360#L1780-1 assume { :end_inline_continueInDirection } true; 949164#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 956220#L2945 assume !(-1 == ~expectedDirection~0); 956214#L2957 assume !(1 == ~expectedDirection~0); 956209#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 955087#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 955085#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 955084#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 955082#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 955083#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 955091#L1201-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 966106#L1222-16 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 966099#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 966095#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 966094#L254-21 assume !(0 == isFloorCalling_~floorID#1); 966089#L258-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 966084#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 950808#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 947526#L1201-21 assume !(0 == buttonForFloorIsPressed_~floorID#1); 947527#L1205-21 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 945607#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 945608#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 947653#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 966080#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 950058#L2039-3 assume !(1 == ~doorState~0); 950059#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 949102#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 946194#L1557-2 assume !(0 == ~currentFloorID~0); 946195#L1563-2 assume !(~currentFloorID~0 > 0); 951393#L1578-2 assume ~currentFloorID~0 > 0; 952871#L1580-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 945041#L1581-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 945042#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 953261#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 950644#L1764-3 assume !(1 == ~currentHeading~0); 950646#L1774-9 assume !(0 == ~currentFloorID~0); 945015#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 947453#L1780-7 assume { :end_inline_continueInDirection } true; 946636#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 966280#L2945-1 assume !(-1 == ~expectedDirection~0); 966270#L2957-1 assume !(1 == ~expectedDirection~0); 966166#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 966167#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 968594#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 968593#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 968591#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 968590#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 968583#L1201-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 968568#L1222-27 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 968561#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 968557#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 968556#L254-42 assume !(0 == isFloorCalling_~floorID#1); 968552#L258-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 968553#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 978411#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 978410#L1201-32 assume !(0 == buttonForFloorIsPressed_~floorID#1); 978408#L1205-32 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 978405#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 978403#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 978402#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 978401#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 956602#L2039-6 assume !(1 == ~doorState~0); 951197#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 951198#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 951185#L1557-4 assume !(0 == ~currentFloorID~0); 951186#L1563-4 assume !(~currentFloorID~0 > 0); 951179#L1578-4 assume ~currentFloorID~0 > 0; 966317#L1580-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 944504#L1581-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 944505#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 952455#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 952457#L1764-6 assume !(1 == ~currentHeading~0); 947852#L1774-18 assume !(0 == ~currentFloorID~0); 947853#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 948366#L1780-13 assume { :end_inline_continueInDirection } true; 948367#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 950571#L2945-2 assume !(-1 == ~expectedDirection~0); 947720#L2957-2 assume !(1 == ~expectedDirection~0); 944556#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 946564#L2071-2 assume { :end_inline_timeShift } true; 946210#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 946211#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 984025#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 984021#L525-1 assume 0 == initPersonOnFloor_~floor#1; 984003#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 983976#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 983964#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 962444#L329-5 assume { :end_inline_callOnFloor } true; 983960#L669-1 assume { :end_inline_initPersonOnFloor } true; 976949#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 976944#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 976942#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 976938#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 975088#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 944299#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 944808#L1222-38 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 950640#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 944920#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 944921#L254-63 assume !(0 == isFloorCalling_~floorID#1); 946974#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 946975#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 945877#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 945878#L1201-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 948446#L1205-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 944904#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 969621#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 969622#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 973593#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 952428#L2039-9 assume !(1 == ~doorState~0); 951713#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 951704#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 951705#L1557-6 assume !(0 == ~currentFloorID~0); 951411#L1563-6 assume !(~currentFloorID~0 > 0); 950354#L1578-6 assume ~currentFloorID~0 > 0; 950356#L1580-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 947281#L1581-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 944175#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 969366#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 948831#L1764-9 assume !(1 == ~currentHeading~0); 948832#L1774-27 assume !(0 == ~currentFloorID~0); 945010#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 945011#L1780-19 assume { :end_inline_continueInDirection } true; 984035#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 984036#L2945-3 assume !(-1 == ~expectedDirection~0); 984023#L2957-3 assume !(1 == ~expectedDirection~0); 984020#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 984018#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 984014#L2586-2 [2022-11-16 12:19:56,209 INFO L750 eck$LassoCheckResult]: Loop: 984014#L2586-2 assume !false; 984013#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 984012#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 984010#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 984011#L2594 assume 1 != cleanup_~tmp___0~8#1; 983975#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 983973#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 983972#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 983967#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 983961#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 983958#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 983959#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 988444#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 988442#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 988439#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 988440#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 989210#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 989205#L1222-49 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 988412#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 988411#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 988410#L254-89 assume !(0 == isFloorCalling_~floorID#1); 988406#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 988405#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 988404#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 988403#L1201-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 988399#L1205-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 988398#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 988396#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 988395#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 988394#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 958721#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 970031#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 970028#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 950309#L1557-8 assume !(0 == ~currentFloorID~0); 950310#L1563-8 assume !(~currentFloorID~0 > 0); 947683#L1578-8 assume ~currentFloorID~0 > 0; 969995#L1580-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 949464#L1581-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 945432#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 956296#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 956297#L1764-12 assume !(1 == ~currentHeading~0); 951006#L1774-36 assume !(0 == ~currentFloorID~0); 948473#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 950985#L1780-25 assume { :end_inline_continueInDirection } true; 947431#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 992640#L2945-4 assume !(-1 == ~expectedDirection~0); 992637#L2957-4 assume !(1 == ~expectedDirection~0); 992635#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 984017#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 984014#L2586-2 [2022-11-16 12:19:56,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:56,210 INFO L85 PathProgramCache]: Analyzing trace with hash -1086131393, now seen corresponding path program 1 times [2022-11-16 12:19:56,210 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:56,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1761731278] [2022-11-16 12:19:56,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:56,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:56,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:56,333 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:56,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:56,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1761731278] [2022-11-16 12:19:56,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1761731278] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:56,334 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:56,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:19:56,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [9836367] [2022-11-16 12:19:56,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:56,335 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:19:56,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:19:56,336 INFO L85 PathProgramCache]: Analyzing trace with hash 1798774954, now seen corresponding path program 1 times [2022-11-16 12:19:56,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:19:56,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [624547555] [2022-11-16 12:19:56,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:19:56,336 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:19:56,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:19:56,356 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:19:56,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:19:56,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [624547555] [2022-11-16 12:19:56,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [624547555] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:19:56,357 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:19:56,357 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:19:56,357 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [452824883] [2022-11-16 12:19:56,357 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:19:56,358 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:19:56,358 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:19:56,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:19:56,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:19:56,358 INFO L87 Difference]: Start difference. First operand 51955 states and 95775 transitions. cyclomatic complexity: 43821 Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:19:58,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:19:58,198 INFO L93 Difference]: Finished difference Result 97479 states and 179359 transitions. [2022-11-16 12:19:58,198 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 97479 states and 179359 transitions. [2022-11-16 12:19:58,601 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23764 [2022-11-16 12:19:58,867 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 97479 states to 97479 states and 179359 transitions. [2022-11-16 12:19:58,868 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 97479 [2022-11-16 12:19:58,937 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 97479 [2022-11-16 12:19:58,937 INFO L73 IsDeterministic]: Start isDeterministic. Operand 97479 states and 179359 transitions. [2022-11-16 12:19:58,986 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:19:58,986 INFO L218 hiAutomatonCegarLoop]: Abstraction has 97479 states and 179359 transitions. [2022-11-16 12:19:59,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97479 states and 179359 transitions. [2022-11-16 12:20:00,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97479 to 97479. [2022-11-16 12:20:00,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97479 states, 97479 states have (on average 1.8399757896572595) internal successors, (179359), 97478 states have internal predecessors, (179359), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:20:00,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97479 states to 97479 states and 179359 transitions. [2022-11-16 12:20:00,364 INFO L240 hiAutomatonCegarLoop]: Abstraction has 97479 states and 179359 transitions. [2022-11-16 12:20:00,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:20:00,365 INFO L428 stractBuchiCegarLoop]: Abstraction has 97479 states and 179359 transitions. [2022-11-16 12:20:00,365 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-11-16 12:20:00,365 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 97479 states and 179359 transitions. [2022-11-16 12:20:01,178 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23764 [2022-11-16 12:20:01,179 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:20:01,179 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:20:01,200 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:20:01,200 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:20:01,201 INFO L748 eck$LassoCheckResult]: Stem: 1099163#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 1099164#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 1095886#L2430 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1094192#L2423 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 1094193#L2438 main_#t~ret94#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 1095449#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 1095450#L2754 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1096747#L247 assume { :end_inline_initFloors } true; 1096748#L1004 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1097349#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1094828#L903 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1098801#L525 assume 0 == initPersonOnFloor_~floor#1; 1099856#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1093601#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1095577#L317 assume !(0 == callOnFloor_~floorID#1); 1095579#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1096285#L329-2 assume { :end_inline_callOnFloor } true; 1096154#L669 assume { :end_inline_initPersonOnFloor } true; 1096155#L2504 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1095744#L1184 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1095745#L1236 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1098820#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1098821#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1099591#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1094139#L1222-5 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1094140#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1093651#L2920 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1093652#L254 assume !(0 == isFloorCalling_~floorID#1); 1099041#L258 assume !(1 == isFloorCalling_~floorID#1); 1098743#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1094463#L281 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1093904#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1093906#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1098427#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1096826#L1222-10 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1094532#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1094533#L1809 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1100237#L1948 assume !(0 != timeShift_~tmp___9~2#1); 1098712#L2039 assume !(1 == ~doorState~0); 1098713#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1097203#L1388 assume !(1 == stopRequestedInDirection_~dir#1); 1097204#L1557 assume !(0 == ~currentFloorID~0); 1097451#L1563 assume ~currentFloorID~0 > 0; 1097453#L1564 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1095986#L254-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1095836#L281-6 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1099307#L1568 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1105737#L1710 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1105734#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1105732#L1764 assume !(1 == ~currentHeading~0); 1105726#L1774 assume !(0 == ~currentFloorID~0); 1105725#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1105721#L1780-1 assume { :end_inline_continueInDirection } true; 1105716#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1105712#L2945 assume !(-1 == ~expectedDirection~0); 1105707#L2957 assume !(1 == ~expectedDirection~0); 1105705#L2958 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1105703#L2071 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1105701#L1184-1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1105700#L1236-3 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1105698#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1105699#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1105717#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1105714#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1105709#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1105660#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1105654#L2920-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1105652#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1105651#L281-21 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1105650#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1105365#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1105360#L1222-21 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1105356#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1105354#L1809-1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1105351#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 1105348#L2039-3 assume !(1 == ~doorState~0); 1105317#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1105314#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 1105315#L1557-2 assume !(0 == ~currentFloorID~0); 1105269#L1563-2 assume ~currentFloorID~0 > 0; 1105268#L1564-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1095410#L254-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1095411#L281-27 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1100461#L1568-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1105258#L1710-2 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1105082#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1105074#L1764-3 assume !(1 == ~currentHeading~0); 1105070#L1774-9 assume !(0 == ~currentFloorID~0); 1105066#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1104969#L1780-7 assume { :end_inline_continueInDirection } true; 1104966#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1104964#L2945-1 assume !(-1 == ~expectedDirection~0); 1104961#L2957-1 assume !(1 == ~expectedDirection~0); 1104959#L2958-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1104958#L2071-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1104957#L1184-2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1104956#L1236-6 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1104954#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1104950#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1102154#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1102148#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1102145#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1102073#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1102066#L2920-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1102063#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1102061#L281-42 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1102059#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1102052#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1102045#L1222-32 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1102043#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1102042#L1809-2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1102040#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 1102038#L2039-6 assume !(1 == ~doorState~0); 1102036#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1102033#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 1102034#L1557-4 assume !(0 == ~currentFloorID~0); 1101872#L1563-4 assume ~currentFloorID~0 > 0; 1101871#L1564-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1101672#L254-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1101671#L281-48 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1101185#L1568-4 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1101169#L1710-4 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1100958#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1100957#L1764-6 assume !(1 == ~currentHeading~0); 1100899#L1774-18 assume !(0 == ~currentFloorID~0); 1100880#L1774-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1100874#L1780-13 assume { :end_inline_continueInDirection } true; 1100873#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1161208#L2945-2 assume !(-1 == ~expectedDirection~0); 1100863#L2957-2 assume !(1 == ~expectedDirection~0); 1100861#L2958-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1100859#L2071-2 assume { :end_inline_timeShift } true; 1100860#L2571 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1100856#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1100850#L903-1 bobCall_#t~ret82#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1100846#L525-1 assume 0 == initPersonOnFloor_~floor#1; 1100847#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1132669#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1100806#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1100807#L329-5 assume { :end_inline_callOnFloor } true; 1148779#L669-1 assume { :end_inline_initPersonOnFloor } true; 1148778#L2504-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1148777#L1184-3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1148776#L1236-9 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1148774#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1148775#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1186763#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1186756#L1222-38 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1128818#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1128812#L2920-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1128813#L254-63 assume !(0 == isFloorCalling_~floorID#1); 1129263#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1129264#L281-63 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1129257#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1129255#L1201-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1129251#L1205-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1129247#L1222-43 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1129248#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1150767#L1809-3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1129241#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 1129240#L2039-9 assume !(1 == ~doorState~0); 1129239#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1129238#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 1100534#L1557-6 assume !(0 == ~currentFloorID~0); 1100532#L1563-6 assume ~currentFloorID~0 > 0; 1097376#L1564-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1097377#L254-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1099891#L281-69 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1099892#L1568-6 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1129201#L1710-6 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1129199#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1129197#L1764-9 assume !(1 == ~currentHeading~0); 1129196#L1774-27 assume !(0 == ~currentFloorID~0); 1129194#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1129186#L1780-19 assume { :end_inline_continueInDirection } true; 1129184#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1145874#L2945-3 assume !(-1 == ~expectedDirection~0); 1145871#L2957-3 assume !(1 == ~expectedDirection~0); 1145869#L2958-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1145868#L2071-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1145866#L2586-2 [2022-11-16 12:20:01,202 INFO L750 eck$LassoCheckResult]: Loop: 1145866#L2586-2 assume !false; 1145865#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1145864#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1145863#L1035 cleanup_#t~ret88#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 1145862#L2594 assume 1 != cleanup_~tmp___0~8#1; 1145861#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1145859#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1145860#L281-84 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 1137365#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1130239#L1356 isIdle_#t~ret16#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1137356#L1369 cleanup_#t~ret89#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 1137341#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1137339#L1184-4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1137337#L1236-12 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1137334#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1137335#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1146320#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1186656#L1222-49 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1129058#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1129053#L2920-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1129051#L254-89 assume !(0 == isFloorCalling_~floorID#1); 1129028#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1129025#L281-89 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1129023#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1129020#L1201-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1129013#L1205-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1129012#L1222-54 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1129006#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1129008#L1809-4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1132455#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 1132454#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1132450#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1132447#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 1132446#L1557-8 assume !(0 == ~currentFloorID~0); 1132444#L1563-8 assume ~currentFloorID~0 > 0; 1132443#L1564-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1100325#L254-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1100322#L281-95 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1100323#L1568-8 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1130428#L1710-8 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1130424#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1130422#L1764-12 assume !(1 == ~currentHeading~0); 1130420#L1774-36 assume !(0 == ~currentFloorID~0); 1130419#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1130416#L1780-25 assume { :end_inline_continueInDirection } true; 1130413#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1145881#L2945-4 assume !(-1 == ~expectedDirection~0); 1145878#L2957-4 assume !(1 == ~expectedDirection~0); 1145876#L2958-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1145867#L2071-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1145866#L2586-2 [2022-11-16 12:20:01,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:20:01,203 INFO L85 PathProgramCache]: Analyzing trace with hash 707835303, now seen corresponding path program 1 times [2022-11-16 12:20:01,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:20:01,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [693731791] [2022-11-16 12:20:01,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:20:01,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:20:01,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:20:01,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:20:01,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:20:01,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [693731791] [2022-11-16 12:20:01,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [693731791] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:20:01,336 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:20:01,336 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:20:01,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355056598] [2022-11-16 12:20:01,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:20:01,336 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:20:01,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:20:01,338 INFO L85 PathProgramCache]: Analyzing trace with hash -2123261040, now seen corresponding path program 1 times [2022-11-16 12:20:01,338 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:20:01,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1936930770] [2022-11-16 12:20:01,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:20:01,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:20:01,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:20:01,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:20:01,410 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:20:01,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1936930770] [2022-11-16 12:20:01,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1936930770] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:20:01,411 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:20:01,411 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:20:01,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [633571716] [2022-11-16 12:20:01,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:20:01,412 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:20:01,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:20:01,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:20:01,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:20:01,413 INFO L87 Difference]: Start difference. First operand 97479 states and 179359 transitions. cyclomatic complexity: 81881 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:20:02,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:20:02,492 INFO L93 Difference]: Finished difference Result 146215 states and 267495 transitions. [2022-11-16 12:20:02,492 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 146215 states and 267495 transitions. [2022-11-16 12:20:03,616 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36472 [2022-11-16 12:20:03,985 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 146215 states to 146215 states and 267495 transitions. [2022-11-16 12:20:03,985 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 146215 [2022-11-16 12:20:04,081 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 146215 [2022-11-16 12:20:04,081 INFO L73 IsDeterministic]: Start isDeterministic. Operand 146215 states and 267495 transitions. [2022-11-16 12:20:04,144 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:20:04,144 INFO L218 hiAutomatonCegarLoop]: Abstraction has 146215 states and 267495 transitions. [2022-11-16 12:20:04,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146215 states and 267495 transitions.