./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version e2fb8bed Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7dffe766d259411d55a5393012f150d80e63eb09c0b69cb40e513f715e96f78e --- Real Ultimate output --- This is Ultimate 0.3.0-?-e2fb8be-m [2025-03-09 07:23:36,122 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-09 07:23:36,175 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2025-03-09 07:23:36,178 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-09 07:23:36,181 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-09 07:23:36,182 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2025-03-09 07:23:36,201 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-09 07:23:36,201 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-09 07:23:36,202 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-09 07:23:36,202 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-09 07:23:36,202 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-09 07:23:36,203 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-09 07:23:36,203 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-09 07:23:36,203 INFO L153 SettingsManager]: * Use SBE=true [2025-03-09 07:23:36,203 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Use old map elimination=false [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2025-03-09 07:23:36,204 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * sizeof long=4 [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * sizeof POINTER=4 [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-09 07:23:36,204 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * sizeof long double=12 [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-09 07:23:36,205 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-09 07:23:36,205 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-09 07:23:36,206 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-09 07:23:36,206 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-09 07:23:36,206 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-09 07:23:36,206 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2025-03-09 07:23:36,206 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7dffe766d259411d55a5393012f150d80e63eb09c0b69cb40e513f715e96f78e [2025-03-09 07:23:36,466 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-09 07:23:36,473 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-09 07:23:36,476 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-09 07:23:36,477 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-09 07:23:36,477 INFO L274 PluginConnector]: CDTParser initialized [2025-03-09 07:23:36,478 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c [2025-03-09 07:23:37,611 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f37a76aa2/2a497bfc540745dbad650d5dca3474b1/FLAG1daa8cbba [2025-03-09 07:23:37,913 INFO L384 CDTParser]: Found 1 translation units. [2025-03-09 07:23:37,915 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c [2025-03-09 07:23:37,934 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f37a76aa2/2a497bfc540745dbad650d5dca3474b1/FLAG1daa8cbba [2025-03-09 07:23:38,172 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f37a76aa2/2a497bfc540745dbad650d5dca3474b1 [2025-03-09 07:23:38,175 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-09 07:23:38,175 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-09 07:23:38,178 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-09 07:23:38,178 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-09 07:23:38,181 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-09 07:23:38,181 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:38,182 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@30d881e0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38, skipping insertion in model container [2025-03-09 07:23:38,182 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:38,223 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-09 07:23:38,536 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-09 07:23:38,557 INFO L200 MainTranslator]: Completed pre-run [2025-03-09 07:23:38,563 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [48] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [414] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [1082] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1120] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1129] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [1485] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1579] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1594] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [3062] [2025-03-09 07:23:38,565 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [3248] [2025-03-09 07:23:38,667 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-09 07:23:38,690 INFO L204 MainTranslator]: Completed translation [2025-03-09 07:23:38,693 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38 WrapperNode [2025-03-09 07:23:38,693 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-09 07:23:38,694 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-09 07:23:38,694 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-09 07:23:38,695 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-09 07:23:38,699 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:38,728 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:38,994 INFO L138 Inliner]: procedures = 89, calls = 341, calls flagged for inlining = 194, calls inlined = 743, statements flattened = 22925 [2025-03-09 07:23:38,995 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-09 07:23:38,995 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-09 07:23:38,995 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-09 07:23:38,995 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-09 07:23:39,002 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,002 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,034 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,131 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2025-03-09 07:23:39,131 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,132 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,221 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,241 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,262 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,284 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,319 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-09 07:23:39,321 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-09 07:23:39,321 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-09 07:23:39,321 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-09 07:23:39,322 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (1/1) ... [2025-03-09 07:23:39,326 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-09 07:23:39,336 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-09 07:23:39,349 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-09 07:23:39,351 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2025-03-09 07:23:39,368 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-09 07:23:39,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-09 07:23:39,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-09 07:23:39,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-03-09 07:23:39,369 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-09 07:23:39,369 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-09 07:23:39,537 INFO L256 CfgBuilder]: Building ICFG [2025-03-09 07:23:39,539 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-09 07:23:46,731 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,731 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,731 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,731 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,732 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,733 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,734 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,735 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L532-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,737 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-37: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-39: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-41: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,738 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-43: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,739 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-45: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,739 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-47: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,739 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1079-49: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-09 07:23:46,739 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-1: valid_product_#res#1 := valid_product_~retValue_acc~7#1; [2025-03-09 07:23:46,739 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1670-1: isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-1: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-3: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-5: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-7: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-9: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-11: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-13: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-15: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-17: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-19: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-21: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-23: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-25: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-27: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,740 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-29: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-31: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-33: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-35: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-37: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-39: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-41: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-43: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-45: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-47: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-49: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-51: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-53: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-55: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-57: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-59: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-61: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-63: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-65: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-67: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-69: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-71: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-73: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-75: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-77: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-79: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-81: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-83: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-85: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-87: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,741 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-89: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-91: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-93: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-95: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-97: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-99: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-101: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-103: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-105: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-107: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-109: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-111: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-113: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-115: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-117: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3285-119: getWeight_#res#1 := getWeight_~retValue_acc~23#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3324-1: getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; [2025-03-09 07:23:46,742 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3324-3: getOrigin_#res#1 := getOrigin_~retValue_acc~24#1; [2025-03-09 07:23:46,743 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-1: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,743 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-3: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,743 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-5: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,743 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-7: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,743 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-9: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,743 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-11: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,743 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-13: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-15: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-17: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-19: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-21: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-23: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-25: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-27: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-29: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-31: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-33: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-35: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-37: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-39: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-41: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,744 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-43: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-45: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-47: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-49: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-51: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-53: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-55: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-57: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-59: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-61: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-63: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-65: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-67: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-69: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-71: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-73: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,745 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-75: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-77: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-79: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-81: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-83: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-85: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-87: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-89: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-91: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-93: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-95: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-97: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-99: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-101: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-103: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-105: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-107: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-109: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-111: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-113: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-115: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-117: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L3363-119: getDestination_#res#1 := getDestination_~retValue_acc~25#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-25: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-27: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-29: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-31: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-33: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-35: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-37: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-39: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-41: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-43: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-45: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-47: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-49: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-51: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,747 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-53: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-55: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-57: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L768-59: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1843-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1843-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1843-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1843-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1843-9: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,749 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-9: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,749 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-11: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,749 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-13: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,749 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-15: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,749 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-17: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2380-19: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-9: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-11: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-13: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-15: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-17: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-19: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-21: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-23: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-25: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-27: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-29: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-31: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-33: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-35: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-37: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-39: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-41: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-43: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-45: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-47: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-49: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-51: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-53: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-55: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-57: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-59: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-61: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-63: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-65: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-67: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-69: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-71: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,750 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-73: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-75: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-77: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-79: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-81: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-83: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-85: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-87: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-89: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-91: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-93: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-95: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-97: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-99: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-101: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-103: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-105: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-107: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1886-109: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-1: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-3: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-5: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-7: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-9: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-11: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-13: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-15: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-17: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-19: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-21: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-23: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-25: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-27: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1895-29: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-1: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-3: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-5: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,751 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-7: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-9: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-11: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-13: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-15: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-17: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-19: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-21: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-23: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-25: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-27: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-29: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-31: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-33: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-35: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-37: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-39: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-41: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-43: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-45: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-47: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-49: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-51: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-53: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-55: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-57: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1935-59: isEmpty_#res#1 := isEmpty_~retValue_acc~15#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2470-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2470-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2470-5: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2470-7: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-09 07:23:46,752 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2470-9: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-9: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-11: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-13: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-15: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-17: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2484-19: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L1482-1: main_#res#1 := main_~retValue_acc~9#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2015-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; [2025-03-09 07:23:46,755 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L2028-1: isIdle_#res#1 := isIdle_~retValue_acc~17#1; [2025-03-09 07:23:47,960 INFO L? ?]: Removed 10590 outVars from TransFormulas that were not future-live. [2025-03-09 07:23:47,960 INFO L307 CfgBuilder]: Performing block encoding [2025-03-09 07:23:48,073 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-09 07:23:48,073 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2025-03-09 07:23:48,074 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 09.03 07:23:48 BoogieIcfgContainer [2025-03-09 07:23:48,074 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-09 07:23:48,075 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2025-03-09 07:23:48,076 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2025-03-09 07:23:48,079 INFO L274 PluginConnector]: BuchiAutomizer initialized [2025-03-09 07:23:48,080 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-09 07:23:48,080 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.03 07:23:38" (1/3) ... [2025-03-09 07:23:48,081 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1d6047e4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.03 07:23:48, skipping insertion in model container [2025-03-09 07:23:48,081 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-09 07:23:48,081 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.03 07:23:38" (2/3) ... [2025-03-09 07:23:48,081 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1d6047e4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.03 07:23:48, skipping insertion in model container [2025-03-09 07:23:48,081 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-09 07:23:48,081 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 09.03 07:23:48" (3/3) ... [2025-03-09 07:23:48,082 INFO L363 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product25.cil.c [2025-03-09 07:23:48,183 INFO L306 stractBuchiCegarLoop]: Interprodecural is true [2025-03-09 07:23:48,183 INFO L307 stractBuchiCegarLoop]: Hoare is None [2025-03-09 07:23:48,183 INFO L308 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2025-03-09 07:23:48,183 INFO L309 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2025-03-09 07:23:48,183 INFO L310 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2025-03-09 07:23:48,183 INFO L311 stractBuchiCegarLoop]: Difference is false [2025-03-09 07:23:48,184 INFO L312 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2025-03-09 07:23:48,184 INFO L316 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2025-03-09 07:23:48,203 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6481 states, 6480 states have (on average 1.866820987654321) internal successors, (12097), 6480 states have internal predecessors, (12097), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:48,327 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1310 [2025-03-09 07:23:48,328 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:23:48,328 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:23:48,342 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:48,343 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:48,343 INFO L338 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2025-03-09 07:23:48,356 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6481 states, 6480 states have (on average 1.866820987654321) internal successors, (12097), 6480 states have internal predecessors, (12097), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:48,421 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1310 [2025-03-09 07:23:48,421 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:23:48,421 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:23:48,430 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:48,431 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:48,437 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:23:48,445 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:23:48,451 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:48,452 INFO L85 PathProgramCache]: Analyzing trace with hash 1131780064, now seen corresponding path program 1 times [2025-03-09 07:23:48,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:48,457 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1043267241] [2025-03-09 07:23:48,457 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:48,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:48,543 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 140 statements into 1 equivalence classes. [2025-03-09 07:23:48,598 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 140 of 140 statements. [2025-03-09 07:23:48,599 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:48,599 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:48,944 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:48,944 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:48,944 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1043267241] [2025-03-09 07:23:48,945 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1043267241] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:48,945 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:48,945 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:23:48,946 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [106890131] [2025-03-09 07:23:48,947 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:48,950 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:23:48,950 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:48,950 INFO L85 PathProgramCache]: Analyzing trace with hash 118112638, now seen corresponding path program 1 times [2025-03-09 07:23:48,951 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:48,951 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116186966] [2025-03-09 07:23:48,951 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:48,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:48,968 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 38 statements into 1 equivalence classes. [2025-03-09 07:23:48,975 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 38 of 38 statements. [2025-03-09 07:23:48,976 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:48,976 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:49,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:49,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:49,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116186966] [2025-03-09 07:23:49,076 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116186966] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:49,076 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:49,076 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-09 07:23:49,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792185422] [2025-03-09 07:23:49,076 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:49,077 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:23:49,078 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:23:49,095 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-09 07:23:49,095 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-09 07:23:49,109 INFO L87 Difference]: Start difference. First operand has 6481 states, 6480 states have (on average 1.866820987654321) internal successors, (12097), 6480 states have internal predecessors, (12097), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:53,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:23:53,002 INFO L93 Difference]: Finished difference Result 10883 states and 20147 transitions. [2025-03-09 07:23:53,003 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10883 states and 20147 transitions. [2025-03-09 07:23:53,069 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2425 [2025-03-09 07:23:53,134 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10883 states to 10849 states and 20108 transitions. [2025-03-09 07:23:53,135 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10849 [2025-03-09 07:23:53,149 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10849 [2025-03-09 07:23:53,150 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10849 states and 20108 transitions. [2025-03-09 07:23:53,173 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:23:53,173 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10849 states and 20108 transitions. [2025-03-09 07:23:53,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10849 states and 20108 transitions. [2025-03-09 07:23:53,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10849 to 10804. [2025-03-09 07:23:53,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10804 states, 10804 states have (on average 1.854776008885598) internal successors, (20039), 10803 states have internal predecessors, (20039), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:53,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10804 states to 10804 states and 20039 transitions. [2025-03-09 07:23:53,401 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10804 states and 20039 transitions. [2025-03-09 07:23:53,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2025-03-09 07:23:53,404 INFO L432 stractBuchiCegarLoop]: Abstraction has 10804 states and 20039 transitions. [2025-03-09 07:23:53,404 INFO L338 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2025-03-09 07:23:53,404 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10804 states and 20039 transitions. [2025-03-09 07:23:53,436 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2414 [2025-03-09 07:23:53,436 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:23:53,436 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:23:53,439 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:53,439 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:53,439 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection_#t~ret57#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret57#1;havoc stopRequestedInDirection_#t~ret57#1;" "assume 0 != stopRequestedInDirection_~tmp~19#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:23:53,440 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:23:53,441 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:53,441 INFO L85 PathProgramCache]: Analyzing trace with hash 1707065638, now seen corresponding path program 1 times [2025-03-09 07:23:53,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:53,441 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167994589] [2025-03-09 07:23:53,441 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:53,441 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:53,472 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 145 statements into 1 equivalence classes. [2025-03-09 07:23:53,482 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 145 of 145 statements. [2025-03-09 07:23:53,483 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:53,483 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:53,637 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:53,637 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:53,637 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167994589] [2025-03-09 07:23:53,637 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167994589] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:53,637 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:53,637 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:23:53,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [420839001] [2025-03-09 07:23:53,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:53,638 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:23:53,638 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:53,638 INFO L85 PathProgramCache]: Analyzing trace with hash 766363817, now seen corresponding path program 1 times [2025-03-09 07:23:53,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:53,638 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149516025] [2025-03-09 07:23:53,638 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:53,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:53,650 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 39 statements into 1 equivalence classes. [2025-03-09 07:23:53,655 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 39 of 39 statements. [2025-03-09 07:23:53,655 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:53,655 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:53,699 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:53,699 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:53,699 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [149516025] [2025-03-09 07:23:53,699 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [149516025] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:53,699 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:53,700 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-09 07:23:53,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [645781325] [2025-03-09 07:23:53,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:53,700 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:23:53,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:23:53,700 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-09 07:23:53,700 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-09 07:23:53,702 INFO L87 Difference]: Start difference. First operand 10804 states and 20039 transitions. cyclomatic complexity: 9236 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:54,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:23:54,709 INFO L93 Difference]: Finished difference Result 10804 states and 19983 transitions. [2025-03-09 07:23:54,709 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10804 states and 19983 transitions. [2025-03-09 07:23:54,760 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2414 [2025-03-09 07:23:54,811 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10804 states to 10804 states and 19983 transitions. [2025-03-09 07:23:54,811 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10804 [2025-03-09 07:23:54,825 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10804 [2025-03-09 07:23:54,825 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10804 states and 19983 transitions. [2025-03-09 07:23:54,843 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:23:54,843 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10804 states and 19983 transitions. [2025-03-09 07:23:54,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10804 states and 19983 transitions. [2025-03-09 07:23:54,967 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10804 to 10804. [2025-03-09 07:23:54,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10804 states, 10804 states have (on average 1.8495927434283599) internal successors, (19983), 10803 states have internal predecessors, (19983), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:55,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10804 states to 10804 states and 19983 transitions. [2025-03-09 07:23:55,006 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10804 states and 19983 transitions. [2025-03-09 07:23:55,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-09 07:23:55,008 INFO L432 stractBuchiCegarLoop]: Abstraction has 10804 states and 19983 transitions. [2025-03-09 07:23:55,008 INFO L338 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2025-03-09 07:23:55,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10804 states and 19983 transitions. [2025-03-09 07:23:55,036 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2414 [2025-03-09 07:23:55,037 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:23:55,037 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:23:55,040 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:55,041 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:55,041 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection_#t~ret57#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret57#1;havoc stopRequestedInDirection_#t~ret57#1;" "assume 0 != stopRequestedInDirection_~tmp~19#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:23:55,042 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:23:55,042 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:55,044 INFO L85 PathProgramCache]: Analyzing trace with hash 563237536, now seen corresponding path program 1 times [2025-03-09 07:23:55,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:55,044 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [982650815] [2025-03-09 07:23:55,045 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:55,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:55,071 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 145 statements into 1 equivalence classes. [2025-03-09 07:23:55,079 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 145 of 145 statements. [2025-03-09 07:23:55,080 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:55,080 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:55,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:55,183 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:55,183 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [982650815] [2025-03-09 07:23:55,183 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [982650815] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:55,184 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:55,184 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:23:55,184 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238506558] [2025-03-09 07:23:55,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:55,184 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:23:55,184 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:55,185 INFO L85 PathProgramCache]: Analyzing trace with hash 1380775011, now seen corresponding path program 1 times [2025-03-09 07:23:55,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:55,185 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1465042375] [2025-03-09 07:23:55,185 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:55,185 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:55,194 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 39 statements into 1 equivalence classes. [2025-03-09 07:23:55,196 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 39 of 39 statements. [2025-03-09 07:23:55,196 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:55,196 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:55,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:55,273 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:55,273 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1465042375] [2025-03-09 07:23:55,273 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1465042375] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:55,273 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:55,273 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2025-03-09 07:23:55,273 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [457224884] [2025-03-09 07:23:55,273 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:55,274 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:23:55,274 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:23:55,274 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2025-03-09 07:23:55,274 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2025-03-09 07:23:55,274 INFO L87 Difference]: Start difference. First operand 10804 states and 19983 transitions. cyclomatic complexity: 9180 Second operand has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 9 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:59,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:23:59,095 INFO L93 Difference]: Finished difference Result 15457 states and 28389 transitions. [2025-03-09 07:23:59,095 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15457 states and 28389 transitions. [2025-03-09 07:23:59,143 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3624 [2025-03-09 07:23:59,193 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15457 states to 15457 states and 28389 transitions. [2025-03-09 07:23:59,193 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15457 [2025-03-09 07:23:59,209 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15457 [2025-03-09 07:23:59,209 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15457 states and 28389 transitions. [2025-03-09 07:23:59,228 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:23:59,229 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15457 states and 28389 transitions. [2025-03-09 07:23:59,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15457 states and 28389 transitions. [2025-03-09 07:23:59,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15457 to 14832. [2025-03-09 07:23:59,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14832 states, 14832 states have (on average 1.8406148867313916) internal successors, (27300), 14831 states have internal predecessors, (27300), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:23:59,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14832 states to 14832 states and 27300 transitions. [2025-03-09 07:23:59,436 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14832 states and 27300 transitions. [2025-03-09 07:23:59,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2025-03-09 07:23:59,437 INFO L432 stractBuchiCegarLoop]: Abstraction has 14832 states and 27300 transitions. [2025-03-09 07:23:59,437 INFO L338 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2025-03-09 07:23:59,437 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14832 states and 27300 transitions. [2025-03-09 07:23:59,473 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3468 [2025-03-09 07:23:59,474 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:23:59,474 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:23:59,476 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:59,476 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:23:59,476 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection_#t~ret57#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret57#1;havoc stopRequestedInDirection_#t~ret57#1;" "assume 0 != stopRequestedInDirection_~tmp~19#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:23:59,477 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:23:59,477 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:59,477 INFO L85 PathProgramCache]: Analyzing trace with hash -1276033490, now seen corresponding path program 1 times [2025-03-09 07:23:59,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:59,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [918691986] [2025-03-09 07:23:59,480 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:59,480 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:59,503 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 158 statements into 1 equivalence classes. [2025-03-09 07:23:59,509 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 158 of 158 statements. [2025-03-09 07:23:59,511 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:59,512 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:59,601 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:59,601 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:59,601 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [918691986] [2025-03-09 07:23:59,601 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [918691986] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:59,601 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:59,601 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:23:59,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [118829114] [2025-03-09 07:23:59,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:59,602 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:23:59,602 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:23:59,602 INFO L85 PathProgramCache]: Analyzing trace with hash -2027989850, now seen corresponding path program 1 times [2025-03-09 07:23:59,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:23:59,602 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816010769] [2025-03-09 07:23:59,602 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:23:59,603 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:23:59,611 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 42 statements into 1 equivalence classes. [2025-03-09 07:23:59,613 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 42 of 42 statements. [2025-03-09 07:23:59,613 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:23:59,613 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:23:59,726 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:23:59,726 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:23:59,726 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816010769] [2025-03-09 07:23:59,726 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816010769] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:23:59,726 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:23:59,726 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-09 07:23:59,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [418133108] [2025-03-09 07:23:59,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:23:59,726 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:23:59,726 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:23:59,727 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-09 07:23:59,727 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-09 07:23:59,727 INFO L87 Difference]: Start difference. First operand 14832 states and 27300 transitions. cyclomatic complexity: 12469 Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 7 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:01,016 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:01,016 INFO L93 Difference]: Finished difference Result 29675 states and 54569 transitions. [2025-03-09 07:24:01,016 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29675 states and 54569 transitions. [2025-03-09 07:24:01,228 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6963 [2025-03-09 07:24:01,326 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29675 states to 29675 states and 54569 transitions. [2025-03-09 07:24:01,326 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29675 [2025-03-09 07:24:01,377 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29675 [2025-03-09 07:24:01,377 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29675 states and 54569 transitions. [2025-03-09 07:24:01,408 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:01,409 INFO L218 hiAutomatonCegarLoop]: Abstraction has 29675 states and 54569 transitions. [2025-03-09 07:24:01,441 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29675 states and 54569 transitions. [2025-03-09 07:24:01,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29675 to 29631. [2025-03-09 07:24:01,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29631 states, 29631 states have (on average 1.8401336438189733) internal successors, (54525), 29630 states have internal predecessors, (54525), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:01,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29631 states to 29631 states and 54525 transitions. [2025-03-09 07:24:01,815 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29631 states and 54525 transitions. [2025-03-09 07:24:01,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2025-03-09 07:24:01,816 INFO L432 stractBuchiCegarLoop]: Abstraction has 29631 states and 54525 transitions. [2025-03-09 07:24:01,816 INFO L338 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2025-03-09 07:24:01,816 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29631 states and 54525 transitions. [2025-03-09 07:24:01,891 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6954 [2025-03-09 07:24:01,891 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:01,891 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:01,894 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:01,894 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:01,895 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection_#t~ret57#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret57#1;havoc stopRequestedInDirection_#t~ret57#1;" "assume 0 != stopRequestedInDirection_~tmp~19#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:01,895 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume !(0 != anyStopRequested_~tmp___3~0#1);" "assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:01,896 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:01,896 INFO L85 PathProgramCache]: Analyzing trace with hash 1401681451, now seen corresponding path program 1 times [2025-03-09 07:24:01,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:01,896 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045438869] [2025-03-09 07:24:01,896 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:01,897 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:01,919 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 160 statements into 1 equivalence classes. [2025-03-09 07:24:01,924 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 160 of 160 statements. [2025-03-09 07:24:01,925 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:01,925 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:02,018 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:02,018 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:02,018 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2045438869] [2025-03-09 07:24:02,018 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2045438869] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:02,018 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:02,018 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:02,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100351152] [2025-03-09 07:24:02,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:02,019 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:02,019 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:02,019 INFO L85 PathProgramCache]: Analyzing trace with hash -1941197468, now seen corresponding path program 1 times [2025-03-09 07:24:02,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:02,020 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852515102] [2025-03-09 07:24:02,020 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:02,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:02,028 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-09 07:24:02,030 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-09 07:24:02,031 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:02,031 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:02,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:02,062 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:02,062 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852515102] [2025-03-09 07:24:02,062 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852515102] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:02,062 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:02,062 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-09 07:24:02,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [326040033] [2025-03-09 07:24:02,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:02,062 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:02,062 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:02,063 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-09 07:24:02,063 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-09 07:24:02,063 INFO L87 Difference]: Start difference. First operand 29631 states and 54525 transitions. cyclomatic complexity: 24895 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:03,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:03,059 INFO L93 Difference]: Finished difference Result 57975 states and 106665 transitions. [2025-03-09 07:24:03,059 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57975 states and 106665 transitions. [2025-03-09 07:24:03,274 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13670 [2025-03-09 07:24:03,667 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57975 states to 57975 states and 106665 transitions. [2025-03-09 07:24:03,667 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57975 [2025-03-09 07:24:03,699 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57975 [2025-03-09 07:24:03,700 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57975 states and 106665 transitions. [2025-03-09 07:24:03,736 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:03,736 INFO L218 hiAutomatonCegarLoop]: Abstraction has 57975 states and 106665 transitions. [2025-03-09 07:24:03,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57975 states and 106665 transitions. [2025-03-09 07:24:04,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57975 to 57951. [2025-03-09 07:24:04,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57951 states, 57951 states have (on average 1.8401925764870322) internal successors, (106641), 57950 states have internal predecessors, (106641), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:04,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57951 states to 57951 states and 106641 transitions. [2025-03-09 07:24:04,455 INFO L240 hiAutomatonCegarLoop]: Abstraction has 57951 states and 106641 transitions. [2025-03-09 07:24:04,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-09 07:24:04,456 INFO L432 stractBuchiCegarLoop]: Abstraction has 57951 states and 106641 transitions. [2025-03-09 07:24:04,457 INFO L338 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2025-03-09 07:24:04,457 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57951 states and 106641 transitions. [2025-03-09 07:24:04,792 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13664 [2025-03-09 07:24:04,793 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:04,793 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:04,796 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:04,799 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:04,800 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection_#t~ret57#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret57#1;havoc stopRequestedInDirection_#t~ret57#1;" "assume 0 != stopRequestedInDirection_~tmp~19#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:04,802 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:04,803 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:04,807 INFO L85 PathProgramCache]: Analyzing trace with hash 1401681451, now seen corresponding path program 2 times [2025-03-09 07:24:04,807 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:04,807 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [218365668] [2025-03-09 07:24:04,807 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-09 07:24:04,807 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:04,853 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 160 statements into 1 equivalence classes. [2025-03-09 07:24:04,866 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 160 of 160 statements. [2025-03-09 07:24:04,869 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-09 07:24:04,869 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:05,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:05,044 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:05,044 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [218365668] [2025-03-09 07:24:05,044 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [218365668] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:05,044 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:05,044 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:05,044 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [498928738] [2025-03-09 07:24:05,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:05,045 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:05,045 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:05,045 INFO L85 PathProgramCache]: Analyzing trace with hash 1654780161, now seen corresponding path program 1 times [2025-03-09 07:24:05,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:05,045 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1415472471] [2025-03-09 07:24:05,045 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:05,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:05,058 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 44 statements into 1 equivalence classes. [2025-03-09 07:24:05,059 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 44 of 44 statements. [2025-03-09 07:24:05,059 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:05,059 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:05,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:05,088 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:05,088 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1415472471] [2025-03-09 07:24:05,088 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1415472471] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:05,088 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:05,088 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-09 07:24:05,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [266476972] [2025-03-09 07:24:05,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:05,088 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:05,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:05,088 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-09 07:24:05,088 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-09 07:24:05,089 INFO L87 Difference]: Start difference. First operand 57951 states and 106641 transitions. cyclomatic complexity: 48691 Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:06,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:06,578 INFO L93 Difference]: Finished difference Result 57951 states and 106365 transitions. [2025-03-09 07:24:06,578 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57951 states and 106365 transitions. [2025-03-09 07:24:06,786 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13664 [2025-03-09 07:24:06,951 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57951 states to 57951 states and 106365 transitions. [2025-03-09 07:24:06,951 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57951 [2025-03-09 07:24:07,000 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57951 [2025-03-09 07:24:07,000 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57951 states and 106365 transitions. [2025-03-09 07:24:07,046 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:07,046 INFO L218 hiAutomatonCegarLoop]: Abstraction has 57951 states and 106365 transitions. [2025-03-09 07:24:07,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57951 states and 106365 transitions. [2025-03-09 07:24:07,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57951 to 57951. [2025-03-09 07:24:07,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57951 states, 57951 states have (on average 1.8354299321840866) internal successors, (106365), 57950 states have internal predecessors, (106365), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:08,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57951 states to 57951 states and 106365 transitions. [2025-03-09 07:24:08,020 INFO L240 hiAutomatonCegarLoop]: Abstraction has 57951 states and 106365 transitions. [2025-03-09 07:24:08,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-09 07:24:08,021 INFO L432 stractBuchiCegarLoop]: Abstraction has 57951 states and 106365 transitions. [2025-03-09 07:24:08,021 INFO L338 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2025-03-09 07:24:08,021 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57951 states and 106365 transitions. [2025-03-09 07:24:08,129 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13664 [2025-03-09 07:24:08,129 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:08,129 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:08,131 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:08,131 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:08,132 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection_#t~ret57#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret57#1;havoc stopRequestedInDirection_#t~ret57#1;" "assume 0 != stopRequestedInDirection_~tmp~19#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:08,132 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume !(2 == isFloorCalling_~floorID#1);" "assume !(3 == isFloorCalling_~floorID#1);" "assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~3#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:08,133 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:08,133 INFO L85 PathProgramCache]: Analyzing trace with hash 1401681451, now seen corresponding path program 3 times [2025-03-09 07:24:08,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:08,133 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1572255550] [2025-03-09 07:24:08,133 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-09 07:24:08,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:08,153 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 160 statements into 1 equivalence classes. [2025-03-09 07:24:08,157 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 160 of 160 statements. [2025-03-09 07:24:08,157 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-09 07:24:08,157 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:08,330 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:08,330 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:08,330 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1572255550] [2025-03-09 07:24:08,330 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1572255550] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:08,330 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:08,330 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:08,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2115682421] [2025-03-09 07:24:08,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:08,331 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:08,331 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:08,331 INFO L85 PathProgramCache]: Analyzing trace with hash -1737265898, now seen corresponding path program 1 times [2025-03-09 07:24:08,331 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:08,332 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1207057642] [2025-03-09 07:24:08,332 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:08,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:08,342 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-09 07:24:08,343 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-09 07:24:08,343 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:08,343 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:08,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:08,354 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:08,355 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1207057642] [2025-03-09 07:24:08,355 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1207057642] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:08,355 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:08,355 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-09 07:24:08,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2122938942] [2025-03-09 07:24:08,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:08,355 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:08,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:08,355 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-09 07:24:08,355 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-09 07:24:08,355 INFO L87 Difference]: Start difference. First operand 57951 states and 106365 transitions. cyclomatic complexity: 48415 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:09,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:09,133 INFO L93 Difference]: Finished difference Result 57415 states and 105633 transitions. [2025-03-09 07:24:09,133 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57415 states and 105633 transitions. [2025-03-09 07:24:09,340 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13368 [2025-03-09 07:24:09,679 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57415 states to 57415 states and 105633 transitions. [2025-03-09 07:24:09,679 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57415 [2025-03-09 07:24:09,738 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57415 [2025-03-09 07:24:09,738 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57415 states and 105633 transitions. [2025-03-09 07:24:09,788 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:09,788 INFO L218 hiAutomatonCegarLoop]: Abstraction has 57415 states and 105633 transitions. [2025-03-09 07:24:09,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57415 states and 105633 transitions. [2025-03-09 07:24:10,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57415 to 57415. [2025-03-09 07:24:10,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57415 states, 57415 states have (on average 1.839815379256292) internal successors, (105633), 57414 states have internal predecessors, (105633), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:10,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57415 states to 57415 states and 105633 transitions. [2025-03-09 07:24:10,498 INFO L240 hiAutomatonCegarLoop]: Abstraction has 57415 states and 105633 transitions. [2025-03-09 07:24:10,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-09 07:24:10,499 INFO L432 stractBuchiCegarLoop]: Abstraction has 57415 states and 105633 transitions. [2025-03-09 07:24:10,499 INFO L338 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2025-03-09 07:24:10,499 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57415 states and 105633 transitions. [2025-03-09 07:24:10,663 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13368 [2025-03-09 07:24:10,663 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:10,663 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:10,665 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:10,665 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:10,665 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "stopRequestedInDirection_#t~ret57#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret57#1;havoc stopRequestedInDirection_#t~ret57#1;" "assume 0 != stopRequestedInDirection_~tmp~19#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:10,666 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume !(0 != anyStopRequested_~tmp___3~0#1);" "assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1;" "assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:10,667 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:10,667 INFO L85 PathProgramCache]: Analyzing trace with hash 1401681451, now seen corresponding path program 4 times [2025-03-09 07:24:10,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:10,667 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1946584356] [2025-03-09 07:24:10,667 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-09 07:24:10,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:10,695 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 160 statements into 2 equivalence classes. [2025-03-09 07:24:10,698 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 159 of 160 statements. [2025-03-09 07:24:10,699 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-09 07:24:10,699 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:10,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:10,973 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:10,973 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1946584356] [2025-03-09 07:24:10,973 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1946584356] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:10,973 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:10,973 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:10,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181541732] [2025-03-09 07:24:10,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:10,973 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:10,974 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:10,974 INFO L85 PathProgramCache]: Analyzing trace with hash 381585848, now seen corresponding path program 1 times [2025-03-09 07:24:10,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:10,974 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1634312844] [2025-03-09 07:24:10,974 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:10,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:10,984 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 47 statements into 1 equivalence classes. [2025-03-09 07:24:10,987 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 47 of 47 statements. [2025-03-09 07:24:10,987 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:10,987 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:11,007 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:11,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:11,008 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1634312844] [2025-03-09 07:24:11,008 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1634312844] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:11,008 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:11,009 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:11,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [645771378] [2025-03-09 07:24:11,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:11,009 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:11,009 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:11,009 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-09 07:24:11,010 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-09 07:24:11,010 INFO L87 Difference]: Start difference. First operand 57415 states and 105633 transitions. cyclomatic complexity: 48219 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:11,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:11,399 INFO L93 Difference]: Finished difference Result 57519 states and 105737 transitions. [2025-03-09 07:24:11,399 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57519 states and 105737 transitions. [2025-03-09 07:24:11,746 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13392 [2025-03-09 07:24:11,877 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57519 states to 57519 states and 105737 transitions. [2025-03-09 07:24:11,877 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57519 [2025-03-09 07:24:11,920 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57519 [2025-03-09 07:24:11,921 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57519 states and 105737 transitions. [2025-03-09 07:24:11,956 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:11,956 INFO L218 hiAutomatonCegarLoop]: Abstraction has 57519 states and 105737 transitions. [2025-03-09 07:24:11,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57519 states and 105737 transitions. [2025-03-09 07:24:12,534 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57519 to 57483. [2025-03-09 07:24:12,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57483 states, 57483 states have (on average 1.8388219125654541) internal successors, (105701), 57482 states have internal predecessors, (105701), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:12,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57483 states to 57483 states and 105701 transitions. [2025-03-09 07:24:12,706 INFO L240 hiAutomatonCegarLoop]: Abstraction has 57483 states and 105701 transitions. [2025-03-09 07:24:12,706 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-09 07:24:12,707 INFO L432 stractBuchiCegarLoop]: Abstraction has 57483 states and 105701 transitions. [2025-03-09 07:24:12,707 INFO L338 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2025-03-09 07:24:12,707 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57483 states and 105701 transitions. [2025-03-09 07:24:12,897 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13384 [2025-03-09 07:24:12,898 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:12,898 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:12,900 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:12,900 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:12,900 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:12,901 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume !(~currentFloorID~0 > 0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectInLiftCalls#1;" "assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:12,902 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:12,902 INFO L85 PathProgramCache]: Analyzing trace with hash 143713179, now seen corresponding path program 1 times [2025-03-09 07:24:12,902 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:12,902 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [968256010] [2025-03-09 07:24:12,902 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:12,902 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:13,117 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 176 statements into 1 equivalence classes. [2025-03-09 07:24:13,121 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 176 of 176 statements. [2025-03-09 07:24:13,121 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:13,121 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:13,196 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:13,196 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:13,196 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [968256010] [2025-03-09 07:24:13,196 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [968256010] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:13,196 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:13,197 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:13,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530543950] [2025-03-09 07:24:13,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:13,198 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:13,198 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:13,198 INFO L85 PathProgramCache]: Analyzing trace with hash 1018926644, now seen corresponding path program 1 times [2025-03-09 07:24:13,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:13,198 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000899149] [2025-03-09 07:24:13,198 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:13,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:13,208 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 47 statements into 1 equivalence classes. [2025-03-09 07:24:13,211 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 47 of 47 statements. [2025-03-09 07:24:13,211 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:13,211 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:13,219 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:13,219 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:13,219 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000899149] [2025-03-09 07:24:13,219 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000899149] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:13,219 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:13,220 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-09 07:24:13,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849099407] [2025-03-09 07:24:13,220 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:13,220 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:13,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:13,220 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-09 07:24:13,220 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-09 07:24:13,220 INFO L87 Difference]: Start difference. First operand 57483 states and 105701 transitions. cyclomatic complexity: 48219 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:14,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:14,462 INFO L93 Difference]: Finished difference Result 107767 states and 197573 transitions. [2025-03-09 07:24:14,462 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 107767 states and 197573 transitions. [2025-03-09 07:24:14,789 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25880 [2025-03-09 07:24:15,222 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 107767 states to 107767 states and 197573 transitions. [2025-03-09 07:24:15,223 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 107767 [2025-03-09 07:24:15,267 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 107767 [2025-03-09 07:24:15,267 INFO L73 IsDeterministic]: Start isDeterministic. Operand 107767 states and 197573 transitions. [2025-03-09 07:24:15,309 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:15,309 INFO L218 hiAutomatonCegarLoop]: Abstraction has 107767 states and 197573 transitions. [2025-03-09 07:24:15,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107767 states and 197573 transitions. [2025-03-09 07:24:16,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107767 to 107767. [2025-03-09 07:24:16,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107767 states, 107767 states have (on average 1.8333348798797406) internal successors, (197573), 107766 states have internal predecessors, (197573), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:16,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107767 states to 107767 states and 197573 transitions. [2025-03-09 07:24:16,412 INFO L240 hiAutomatonCegarLoop]: Abstraction has 107767 states and 197573 transitions. [2025-03-09 07:24:16,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-09 07:24:16,412 INFO L432 stractBuchiCegarLoop]: Abstraction has 107767 states and 197573 transitions. [2025-03-09 07:24:16,412 INFO L338 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2025-03-09 07:24:16,413 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 107767 states and 197573 transitions. [2025-03-09 07:24:17,010 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25880 [2025-03-09 07:24:17,010 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:17,010 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:17,012 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:17,012 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:17,012 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:17,013 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:17,014 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:17,014 INFO L85 PathProgramCache]: Analyzing trace with hash -200771511, now seen corresponding path program 1 times [2025-03-09 07:24:17,014 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:17,014 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1041744837] [2025-03-09 07:24:17,014 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:17,014 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:17,043 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 177 statements into 1 equivalence classes. [2025-03-09 07:24:17,046 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 177 of 177 statements. [2025-03-09 07:24:17,046 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:17,047 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:17,111 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:17,112 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:17,112 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1041744837] [2025-03-09 07:24:17,112 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1041744837] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:17,112 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:17,112 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:17,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1285002906] [2025-03-09 07:24:17,112 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:17,113 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:17,113 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:17,113 INFO L85 PathProgramCache]: Analyzing trace with hash 989635554, now seen corresponding path program 1 times [2025-03-09 07:24:17,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:17,113 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740221631] [2025-03-09 07:24:17,113 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:17,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:17,123 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 47 statements into 1 equivalence classes. [2025-03-09 07:24:17,124 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 47 of 47 statements. [2025-03-09 07:24:17,125 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:17,125 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:17,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:17,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:17,150 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740221631] [2025-03-09 07:24:17,150 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740221631] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:17,150 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:17,150 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-09 07:24:17,150 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [822108685] [2025-03-09 07:24:17,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:17,150 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:17,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:17,150 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-09 07:24:17,150 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-09 07:24:17,151 INFO L87 Difference]: Start difference. First operand 107767 states and 197573 transitions. cyclomatic complexity: 89807 Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 5 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:20,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:20,081 INFO L93 Difference]: Finished difference Result 142163 states and 260787 transitions. [2025-03-09 07:24:20,082 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 142163 states and 260787 transitions. [2025-03-09 07:24:20,762 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34734 [2025-03-09 07:24:21,111 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 142163 states to 142163 states and 260787 transitions. [2025-03-09 07:24:21,111 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 142163 [2025-03-09 07:24:21,214 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 142163 [2025-03-09 07:24:21,215 INFO L73 IsDeterministic]: Start isDeterministic. Operand 142163 states and 260787 transitions. [2025-03-09 07:24:21,303 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:21,303 INFO L218 hiAutomatonCegarLoop]: Abstraction has 142163 states and 260787 transitions. [2025-03-09 07:24:21,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142163 states and 260787 transitions. [2025-03-09 07:24:22,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142163 to 106151. [2025-03-09 07:24:22,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106151 states, 106151 states have (on average 1.8358282069881584) internal successors, (194875), 106150 states have internal predecessors, (194875), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:23,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106151 states to 106151 states and 194875 transitions. [2025-03-09 07:24:23,097 INFO L240 hiAutomatonCegarLoop]: Abstraction has 106151 states and 194875 transitions. [2025-03-09 07:24:23,097 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-09 07:24:23,098 INFO L432 stractBuchiCegarLoop]: Abstraction has 106151 states and 194875 transitions. [2025-03-09 07:24:23,098 INFO L338 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2025-03-09 07:24:23,098 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106151 states and 194875 transitions. [2025-03-09 07:24:23,331 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25476 [2025-03-09 07:24:23,331 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:23,331 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:23,333 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:23,333 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:23,333 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume !(0 == callOnFloor_~floorID#1);" "assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:23,333 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume !(0 != anyStopRequested_~tmp___3~0#1);" "assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1;" "assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:23,334 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:23,334 INFO L85 PathProgramCache]: Analyzing trace with hash 851689340, now seen corresponding path program 1 times [2025-03-09 07:24:23,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:23,334 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [236079802] [2025-03-09 07:24:23,334 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:23,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:23,357 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 180 statements into 1 equivalence classes. [2025-03-09 07:24:23,360 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 180 of 180 statements. [2025-03-09 07:24:23,360 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:23,360 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:23,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:23,416 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:23,416 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [236079802] [2025-03-09 07:24:23,416 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [236079802] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:23,417 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:23,417 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:23,417 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [132654129] [2025-03-09 07:24:23,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:23,417 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:23,417 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:23,417 INFO L85 PathProgramCache]: Analyzing trace with hash -1236825607, now seen corresponding path program 1 times [2025-03-09 07:24:23,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:23,418 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606499081] [2025-03-09 07:24:23,418 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:23,418 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:23,426 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 52 statements into 1 equivalence classes. [2025-03-09 07:24:23,427 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-09 07:24:23,427 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:23,427 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:23,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:23,444 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:23,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606499081] [2025-03-09 07:24:23,444 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606499081] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:23,444 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:23,444 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:23,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1576478895] [2025-03-09 07:24:23,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:23,444 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:23,444 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:23,445 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-09 07:24:23,445 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-09 07:24:23,445 INFO L87 Difference]: Start difference. First operand 106151 states and 194875 transitions. cyclomatic complexity: 88725 Second operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:25,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:25,334 INFO L93 Difference]: Finished difference Result 109079 states and 199795 transitions. [2025-03-09 07:24:25,334 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109079 states and 199795 transitions. [2025-03-09 07:24:25,982 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25802 [2025-03-09 07:24:26,275 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109079 states to 107159 states and 196219 transitions. [2025-03-09 07:24:26,275 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 107159 [2025-03-09 07:24:26,347 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 107159 [2025-03-09 07:24:26,347 INFO L73 IsDeterministic]: Start isDeterministic. Operand 107159 states and 196219 transitions. [2025-03-09 07:24:26,415 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:26,415 INFO L218 hiAutomatonCegarLoop]: Abstraction has 107159 states and 196219 transitions. [2025-03-09 07:24:26,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107159 states and 196219 transitions. [2025-03-09 07:24:27,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107159 to 106959. [2025-03-09 07:24:27,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106959 states, 106959 states have (on average 1.8319075533615685) internal successors, (195939), 106958 states have internal predecessors, (195939), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:27,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106959 states to 106959 states and 195939 transitions. [2025-03-09 07:24:27,714 INFO L240 hiAutomatonCegarLoop]: Abstraction has 106959 states and 195939 transitions. [2025-03-09 07:24:27,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-09 07:24:27,715 INFO L432 stractBuchiCegarLoop]: Abstraction has 106959 states and 195939 transitions. [2025-03-09 07:24:27,715 INFO L338 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2025-03-09 07:24:27,715 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 106959 states and 195939 transitions. [2025-03-09 07:24:28,060 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25752 [2025-03-09 07:24:28,060 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:28,060 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:28,062 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:28,062 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:28,063 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret122#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:28,064 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:28,064 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:28,064 INFO L85 PathProgramCache]: Analyzing trace with hash 1236144014, now seen corresponding path program 1 times [2025-03-09 07:24:28,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:28,064 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1229725184] [2025-03-09 07:24:28,064 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:28,065 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:28,457 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 181 statements into 1 equivalence classes. [2025-03-09 07:24:28,460 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 181 of 181 statements. [2025-03-09 07:24:28,460 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:28,460 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:28,521 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:28,521 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:28,521 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1229725184] [2025-03-09 07:24:28,521 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1229725184] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:28,521 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:28,521 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:28,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [983941354] [2025-03-09 07:24:28,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:28,522 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:28,522 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:28,522 INFO L85 PathProgramCache]: Analyzing trace with hash 2016243842, now seen corresponding path program 1 times [2025-03-09 07:24:28,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:28,522 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1182632284] [2025-03-09 07:24:28,522 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:28,523 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:28,531 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 48 statements into 1 equivalence classes. [2025-03-09 07:24:28,533 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 48 of 48 statements. [2025-03-09 07:24:28,534 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:28,534 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:28,564 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:28,564 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:28,564 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1182632284] [2025-03-09 07:24:28,564 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1182632284] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:28,564 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:28,564 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-09 07:24:28,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1619068910] [2025-03-09 07:24:28,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:28,565 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:28,565 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:28,565 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-09 07:24:28,565 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-09 07:24:28,565 INFO L87 Difference]: Start difference. First operand 106959 states and 195939 transitions. cyclomatic complexity: 88981 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:29,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:29,310 INFO L93 Difference]: Finished difference Result 156423 states and 286195 transitions. [2025-03-09 07:24:29,310 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 156423 states and 286195 transitions. [2025-03-09 07:24:30,175 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 38124 [2025-03-09 07:24:30,601 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 156423 states to 156423 states and 286195 transitions. [2025-03-09 07:24:30,601 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 156423 [2025-03-09 07:24:30,726 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 156423 [2025-03-09 07:24:30,727 INFO L73 IsDeterministic]: Start isDeterministic. Operand 156423 states and 286195 transitions. [2025-03-09 07:24:31,181 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-09 07:24:31,181 INFO L218 hiAutomatonCegarLoop]: Abstraction has 156423 states and 286195 transitions. [2025-03-09 07:24:31,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156423 states and 286195 transitions. [2025-03-09 07:24:32,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156423 to 156319. [2025-03-09 07:24:32,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156319 states, 156319 states have (on average 1.829867130675094) internal successors, (286043), 156318 states have internal predecessors, (286043), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:32,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156319 states to 156319 states and 286043 transitions. [2025-03-09 07:24:32,791 INFO L240 hiAutomatonCegarLoop]: Abstraction has 156319 states and 286043 transitions. [2025-03-09 07:24:32,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-09 07:24:32,792 INFO L432 stractBuchiCegarLoop]: Abstraction has 156319 states and 286043 transitions. [2025-03-09 07:24:32,792 INFO L338 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2025-03-09 07:24:32,792 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 156319 states and 286043 transitions. [2025-03-09 07:24:33,745 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 38098 [2025-03-09 07:24:33,745 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-09 07:24:33,745 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-09 07:24:33,747 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:33,747 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-09 07:24:33,747 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret41#1, main_~retValue_acc~9#1, main_~tmp~11#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret41#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret41#1;havoc main_#t~ret41#1;" "assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume !(1 == isFloorCalling_~floorID#1);" "assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~24#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~24#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~24#1;" "bobCall_#t~ret29#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~24#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret29#1;havoc bobCall_#t~ret29#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret29#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret35#1, cleanup_#t~ret36#1, cleanup_~i~0#1, cleanup_~tmp~9#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0;" [2025-03-09 07:24:33,750 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1;" "cleanup_#t~ret35#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret35#1;havoc cleanup_#t~ret35#1;" "assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret51#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret51#1;havoc anyStopRequested_#t~ret51#1;" "assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1;" "isIdle_#t~ret56#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret56#1;havoc isIdle_#t~ret56#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1;" "cleanup_#t~ret36#1 := isIdle_#res#1;havoc isIdle_#t~ret56#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret36#1;havoc cleanup_#t~ret36#1;" "assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~25#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~25#1 := __utac_acc__Specification3_spec__1_#t~ret120#1;havoc __utac_acc__Specification3_spec__1_#t~ret120#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~25#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;havoc getCurrentHeading_~retValue_acc~14#1;getCurrentHeading_~retValue_acc~14#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~14#1;" "__utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~14#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "__utac_acc__Specification3_spec__1_#t~ret127#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret127#1;havoc __utac_acc__Specification3_spec__1_#t~ret127#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret120#1, __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~25#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedAtCurrentFloor_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret69#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1;" "stopRequestedAtCurrentFloor_#t~ret70#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret70#1;havoc stopRequestedAtCurrentFloor_#t~ret70#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret83#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_#t~ret70#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1;" "assume !(0 != timeShift_~tmp___9~2#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~tmp___1~4#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1;" "assume !(1 == stopRequestedInDirection_~dir#1);" "assume !(0 == ~currentFloorID~0);" "assume ~currentFloorID~0 > 0;" "assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "stopRequestedInDirection_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1;" "assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1;" "timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~tmp___1~4#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1;" "assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~26#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret132#1, __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_~tmp~26#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_~tmp~23#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1;" [2025-03-09 07:24:33,751 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:33,751 INFO L85 PathProgramCache]: Analyzing trace with hash 745701711, now seen corresponding path program 1 times [2025-03-09 07:24:33,751 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:33,751 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [871782731] [2025-03-09 07:24:33,751 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:33,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:33,770 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 181 statements into 1 equivalence classes. [2025-03-09 07:24:33,772 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 181 of 181 statements. [2025-03-09 07:24:33,773 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:33,773 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:33,833 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:33,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:33,834 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [871782731] [2025-03-09 07:24:33,834 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [871782731] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:33,834 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:33,834 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-09 07:24:33,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499207734] [2025-03-09 07:24:33,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:33,834 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-09 07:24:33,835 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-09 07:24:33,835 INFO L85 PathProgramCache]: Analyzing trace with hash -1391219773, now seen corresponding path program 1 times [2025-03-09 07:24:33,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-09 07:24:33,835 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431537551] [2025-03-09 07:24:33,835 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-09 07:24:33,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-09 07:24:33,843 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 48 statements into 1 equivalence classes. [2025-03-09 07:24:33,846 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 48 of 48 statements. [2025-03-09 07:24:33,846 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-09 07:24:33,846 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-09 07:24:33,856 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-09 07:24:33,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-09 07:24:33,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431537551] [2025-03-09 07:24:33,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431537551] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-09 07:24:33,856 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-09 07:24:33,857 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-09 07:24:33,857 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1893347587] [2025-03-09 07:24:33,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-09 07:24:33,857 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-09 07:24:33,857 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-09 07:24:33,858 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-09 07:24:33,858 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-09 07:24:33,858 INFO L87 Difference]: Start difference. First operand 156319 states and 286043 transitions. cyclomatic complexity: 129725 Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-09 07:24:34,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-09 07:24:34,575 INFO L93 Difference]: Finished difference Result 228077 states and 417145 transitions. [2025-03-09 07:24:34,575 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 228077 states and 417145 transitions.